delete_group
Delete an unwanted NSX security group once it is no longer referenced. The tool blocks deletion if any policies or rules still depend on it, preventing broken security configurations.
Instructions
[WRITE] Delete an NSX security group.
Returns {"status": "deleted", "message": ...}, else {"error", "hint"}. Use it once get_group shows the group is unwanted. Refuses if anything still references it (NSX's group-associations API covers DFW rules and policies, gateway firewall, nested groups, service insertion), and refuses if that check itself fails (fail-safe). When the refusal names a DFW rule, retarget it with update_dfw_rule or drop it with delete_dfw_rule first.
Input Schema
| Name | Required | Description | Default |
|---|---|---|---|
| target | No | Optional NSX Manager target from config. | |
| group_id | Yes | ID of the group to delete. |