This CQL will not work since both `tenantId` and `groupId` are not primary keys / indexed. You can only delete using `policyId` or `trigger`.