UniFi Security Operations

API mode requirements:

• Zone-based firewall, firewall rules/zones/groups: local only
• ACLs, traffic matching lists: local only (the console's integration API)
• Port forwarding, VPN: local only

Roles: with bearer tokens, creating or updating firewall policies, ZBF policies, legacy firewall rules and network-to-zone assignments needs the admin role. The operator role can still manage ACL rules, port forwards, groups, zones and traffic matching lists.

Traditional Firewall Rules