CREATE GROUP

Creates a group for collective role assignment.

Category: securityPrivilege: ManageUsersDeltaForge extension

Syntax

CREATE GROUP [IF NOT EXISTS] <name> [COMMENT '<description>']

Description

## Overview CREATE GROUP registers a group principal in the RBAC catalog. Groups are containers of users; granting a role to a group grants it to every member. ## Behavior - Without IF NOT EXISTS, creating a group that already exists raises an error. With IF NOT EXISTS, the existing group is left unchanged. - The group starts empty. Add members with ALTER GROUP ADD USER. - Groups cannot contain other groups; group nesting is not supported. Role inheritance is the substitute mechanism. ## Access Control Requires the `ManageUsers` privilege. ## Compatibility DeltaForge extension.

Parameters

Name	Type	Description
`name`		Specifies the group name.
`comment`		Optional human-readable description.
`if_not_exists`		When true, succeed silently if a group with this name already exists.

Examples

CREATE GROUP platform_team COMMENT 'Platform engineers';

CREATE GROUP IF NOT EXISTS platform_team;

Pitfalls

Groups cannot be nested. To express hierarchy, use role inheritance (CREATE ROLE ... INHERIT) and grant the inherited roles to the appropriate groups.