create_group
Create an NSX security group with membership based on tags, IP addresses, or segment paths to enforce distributed firewall policies.
Instructions
[WRITE] Create an NSX security group with optional membership criteria.
Membership criteria are ANDed together when multiple are provided:
tag_scope / tag_value: include VMs matching the NSX tag
ip_addresses: include specific IP addresses or CIDRs
segment_paths: include all VMs on specified segments
Args: group_id: Unique group identifier (alphanumeric, hyphens, underscores). display_name: Human-readable group name. description: Optional description. tag_scope: NSX tag scope for VM membership (e.g. 'env'). tag_value: NSX tag value for VM membership (e.g. 'production'). ip_addresses: List of IP addresses or CIDRs (e.g. ['10.0.1.0/24']). segment_paths: List of NSX segment policy paths. target: Optional NSX Manager target name from config.
Input Schema
| Name | Required | Description | Default |
|---|---|---|---|
| group_id | Yes | ||
| display_name | Yes | ||
| description | No | ||
| tag_scope | No | ||
| tag_value | No | ||
| ip_addresses | No | ||
| segment_paths | No | ||
| target | No |