create_group
Create NSX security groups to define VM membership using tags, IP addresses, or network segments for microsegmentation and firewall policy enforcement.
Instructions
Create an NSX security group with optional membership criteria.
Membership criteria are ANDed together when multiple are provided:
tag_scope / tag_value: include VMs matching the NSX tag
ip_addresses: include specific IP addresses or CIDRs
segment_paths: include all VMs on specified segments
Args: group_id: Unique group identifier (alphanumeric, hyphens, underscores). display_name: Human-readable group name. description: Optional description. tag_scope: NSX tag scope for VM membership (e.g. 'env'). tag_value: NSX tag value for VM membership (e.g. 'production'). ip_addresses: List of IP addresses or CIDRs (e.g. ['10.0.1.0/24']). segment_paths: List of NSX segment policy paths. target: Optional NSX Manager target name from config.
Input Schema
| Name | Required | Description | Default |
|---|---|---|---|
| group_id | Yes | ||
| display_name | Yes | ||
| description | No | ||
| tag_scope | No | ||
| tag_value | No | ||
| ip_addresses | No | ||
| segment_paths | No | ||
| target | No |