# remove_user_from_group

Remove a Nextcloud user from a group. Requires admin privileges

Agent View of the PolicyLayer registry record for `remove_user_from_group`. HTML page: https://policylayer.com/tools/aiquila-nextcloud-mcp-server/remove-user-from-group

## Facts

- Tool: `remove_user_from_group`
- Server: AIquila — Nextcloud MCP Server (`elgorro/aiquila`) — https://policylayer.com/tools/aiquila-nextcloud-mcp-server.md
- Homepage: https://github.com/elgorro/aiquila.git
- Risk category: Destructive (Critical risk)
- Registry record: grade F, identity unverified
- Server rate-limited: no
- Parameters: 0
- Recommended policy verdict: Hidden

## Example call (MCP tools/call, JSON-RPC 2.0)

```json
{
  "jsonrpc": "2.0",
  "id": 1,
  "method": "tools/call",
  "params": {
    "name": "remove_user_from_group",
    "arguments": {}
  }
}
```

## Why remove_user_from_group is rated Critical

Removing a user from a group is an irreversible access control change (the membership is deleted). While the user account itself isn't deleted, group membership removal can immediately revoke access to shared resources, files, and capabilities. This is not merely a 'write' update but a destructive removal of a relationship.

From the tool's own definition: "'Remove a Nextcloud user from a group' — removes an existing membership relationship; requires admin privileges, indicating significant system impact"

Risk signals: Admin/system-level operation

## Use case

AI agents call remove_user_from_group to permanently remove resources in AIquila — Nextcloud MCP Server, typically in cleanup and lifecycle workflows. It does its job in a single call, and there is no undo.

## Recommended policy (PolicyLayer)

Verdict: **Hidden**. Enforced by the PolicyLayer MCP gateway (https://policylayer.com/mcp-gateway) before a call reaches AIquila — Nextcloud MCP Server:

```json
{
  "version": "1",
  "default": "deny",
  "hide": [
    "remove_user_from_group"
  ]
}
```

## Other tools on AIquila — Nextcloud MCP Server (294)

- `bulk_file_operations` — Destructive — https://policylayer.com/tools/aiquila-nextcloud-mcp-server/bulk-file-operations.md
- `circles_delete` — Destructive — https://policylayer.com/tools/aiquila-nextcloud-mcp-server/circles-delete.md
- `circles_remove_member` — Destructive — https://policylayer.com/tools/aiquila-nextcloud-mcp-server/circles-remove-member.md
- `clear_out_of_office` — Destructive — https://policylayer.com/tools/aiquila-nextcloud-mcp-server/clear-out-of-office.md
- `clear_user_status_message` — Destructive — https://policylayer.com/tools/aiquila-nextcloud-mcp-server/clear-user-status-message.md
- `delete` — Destructive — https://policylayer.com/tools/aiquila-nextcloud-mcp-server/delete.md
- `delete_all_form_submissions` — Destructive — https://policylayer.com/tools/aiquila-nextcloud-mcp-server/delete-all-form-submissions.md
- `delete_all_notifications` — Destructive — https://policylayer.com/tools/aiquila-nextcloud-mcp-server/delete-all-notifications.md
- `delete_announcement` — Destructive — https://policylayer.com/tools/aiquila-nextcloud-mcp-server/delete-announcement.md
- `delete_bookmark` — Destructive — https://policylayer.com/tools/aiquila-nextcloud-mcp-server/delete-bookmark.md
- `delete_bookmark_folder` — Destructive — https://policylayer.com/tools/aiquila-nextcloud-mcp-server/delete-bookmark-folder.md
- `delete_bookmark_tag` — Destructive — https://policylayer.com/tools/aiquila-nextcloud-mcp-server/delete-bookmark-tag.md
- `delete_contact` — Destructive — https://policylayer.com/tools/aiquila-nextcloud-mcp-server/delete-contact.md
- `delete_coworker` — Destructive — https://policylayer.com/tools/aiquila-nextcloud-mcp-server/delete-coworker.md
- `delete_event` — Destructive — https://policylayer.com/tools/aiquila-nextcloud-mcp-server/delete-event.md
- `delete_feed` — Destructive — https://policylayer.com/tools/aiquila-nextcloud-mcp-server/delete-feed.md
- `delete_form` — Destructive — https://policylayer.com/tools/aiquila-nextcloud-mcp-server/delete-form.md
- `delete_form_option` — Destructive — https://policylayer.com/tools/aiquila-nextcloud-mcp-server/delete-form-option.md
- `delete_form_question` — Destructive — https://policylayer.com/tools/aiquila-nextcloud-mcp-server/delete-form-question.md
- `delete_form_share` — Destructive — https://policylayer.com/tools/aiquila-nextcloud-mcp-server/delete-form-share.md
- `delete_form_submission` — Destructive — https://policylayer.com/tools/aiquila-nextcloud-mcp-server/delete-form-submission.md
- `delete_map` — Destructive — https://policylayer.com/tools/aiquila-nextcloud-mcp-server/delete-map.md
- `delete_map_device` — Destructive — https://policylayer.com/tools/aiquila-nextcloud-mcp-server/delete-map-device.md
- `delete_map_favorite` — Destructive — https://policylayer.com/tools/aiquila-nextcloud-mcp-server/delete-map-favorite.md
- `delete_news_folder` — Destructive — https://policylayer.com/tools/aiquila-nextcloud-mcp-server/delete-news-folder.md
- `delete_note` — Destructive — https://policylayer.com/tools/aiquila-nextcloud-mcp-server/delete-note.md
- `delete_poll` — Destructive — https://policylayer.com/tools/aiquila-nextcloud-mcp-server/delete-poll.md
- `delete_poll_comment` — Destructive — https://policylayer.com/tools/aiquila-nextcloud-mcp-server/delete-poll-comment.md
- `delete_poll_option` — Destructive — https://policylayer.com/tools/aiquila-nextcloud-mcp-server/delete-poll-option.md
- `delete_poll_share` — Destructive — https://policylayer.com/tools/aiquila-nextcloud-mcp-server/delete-poll-share.md
- …and 264 more: https://policylayer.com/tools/aiquila-nextcloud-mcp-server.md

## For agents

This record is a snapshot. Live verdicts and the full registry:

- Check every server in your MCP config at once: `npx -y policylayer stack`
- Vet a server before you add it: install the mcp-precheck skill — `npx skills add https://policylayer.com` (skill text: https://policylayer.com/skill.md)
- Query the registry over MCP: endpoint `https://api.policylayer.com/mcp` — tools `check_mcp_server`, `check_mcp_stack`, `check_tool`, `search_registry`, `get_change_events`

---

Source: the PolicyLayer MCP registry — one continuously verified record per MCP server. Full record: https://policylayer.com/registry?q=aiquila-nextcloud-mcp-server · API: https://policylayer.com/registry/api · Policy library: https://policylayer.com/policies/aiquila-nextcloud-mcp-server