# CREATE WORKSPACE GROUP

The `CREATE WORKSPACE GROUP` command creates a new cluster group.

## Syntax

```
CREATE WORKSPACE GROUP [ IF NOT EXISTS ] '<group_name>' 
    IN REGION { ID '<region_ID>' | '<region_name>' }
    [ WITH PASSWORD '<password>' ]
    [ EXPIRES AT '<expiry_time>' ]
    [ WITH FIREWALL RANGES '<ip_range>',... ]
    [ WITH BACKUP BUCKET KMS KEY ID '<backup_key_ID>' ]
    [ WITH DATA BUCKET KMS KEY ID '<data_key_ID>' ]
    [ WITH SMARTDR ]
    [ ALLOW ALL TRAFFIC ]
    [ WITH UPDATE WINDOW '<day>:<hour>' ]
```

## Arguments

* `group_name`: Name of the cluster group.
* `region_ID`, `region_name`: The ID or name of the region in which the cluster group is created.
* `password`: The admin password for the cluster group. The password must contain the following:

  * At least 8 characters
  * At least one uppercase character
  * At least one lowercase character
  * At least one number or special character
* `expiry_time`: The timestamp or the time interval at which the cluster group automatically expires (terminates).
* `ip_range`: A list of allowed IP addresses or CIDR block.
* `backup_key_ID`: The KMS key ID associated with the backup bucket.
* `data_key_ID`: The KMS key ID associated with the data bucket.
* `day:hour`: The day of the week (0-6 starting on a Sunday) and the hours of the day (0-23 UTC) when the updates are applied to the cluster group.

## Remarks

* Specify the `IF NOT EXISTS` clause to create a new cluster group only when a cluster group with the specified name does not exist already. If a cluster group with the specified name already exists and the `IF NOT EXISTS` clause is not specified, the `CREATE WORKSPACE GROUP` command returns an error.
* If the `WITH BACKUP BUCKET KMS KEY ID` clause is specified, it enables Customer-Managed Encryption Keys (CMEK) encryption for the backup bucket of the cluster group. This feature is only supported in cluster groups deployed in AWS.
* If the `WITH DATA BUCKET KMS KEY ID` clause is specified, it enables Customer-Managed Encryption Keys (CMEK) encryption for the data bucket and Amazon Elastic Block Store (EBS) volumes of the cluster group. This feature is only supported in cluster groups deployed in AWS.
* Specify the `WITH SMART DR` clause to enable [Smart Disaster Recovery (DR): Smart DR](https://docs.singlestore.com/cloud/manage-data/smart-disaster-recovery-dr-smart-dr.md) for the cluster group.
* Specify the `ALLOW ALL TRAFFIC` clause to allow access to the cluster group from any IP address.

## Examples

* The following command creates a cluster group in the specified region:
  ```sql
  CREATE WORKSPACE GROUP 's2-group' IN REGION 'US East 2 (Ohio)';
  ```
* The following command creates a cluster group with additional configurations:
  ```sql
  CREATE WORKSPACE GROUP IF NOT EXISTS 's2-group'
     IN REGION ID '93b61160-0000-1000-9000-977b8e2e3ee5'
     WITH FIREWALL RANGES '0.0.0.0/0'
     WITH SMARTDR;
  ```

***

Modified at: September 11, 2026

Source: [/cloud/reference/fusion-sql/create-workspace-group/](https://docs.singlestore.com/cloud/reference/fusion-sql/create-workspace-group/)

(An index of the documentation is available at /llms.txt)