delete_firewall_group

delete_firewall_group

Preview deletion of a firewall group.

This tool no longer deletes on its own. It returns a preview envelope with a token; call confirm_destructive_action(token) to commit the delete. Tokens expire after 5 minutes.

Side effects:

• None until confirm_destructive_action runs against the token.
• On confirm: removes the group. The controller rejects deletion of a group still referenced by any firewall rule — detach it from every rule first.
• dry_run=True returns the legacy would_delete envelope with no token — purely informational, no commit step possible.

Example

delete_firewall_group(group_id="65f...")

Parameters

Parameter	Type	Required	Default	Description
group_id	string	yes	—	The _id from list_firewall_groups.
controller	string	no	”default”	Name of the UniFi controller to target. Defaults to "default".
dry_run	boolean	no	false	True skips token generation and returns the legacy {"dry_run": true, ...} envelope. False (default) generates a preview token that must be confirmed.