The docs mention 'remote_ip_group' as part of the rule declaration, and I'd expect that it function like it does in horizon/neutron cli/nova cli, However when I use it, I get the error
Error: Unrecognized attribute(s) 'remote_ip_group'
Meaning, I can't make group-based network ACL using this module.