# Assigning account roles to users

## About account roles

Fabricate supports the following account roles:

* **Owner -** Every account must have at least one owner. The first user in the account is automatically an owner. Other users can be assigned as owners.\
  \
  Account owners have full access to manage the account. They can:
  * Create and manage workspaces.
  * Add and remove account users.
  * Change assigned account roles.
  * Manage allowed domains.
  * Add and remove API keys.
  * View the audit log.
* **Member -** An account member can only create and manage workspaces in the account. They do not have other access to manage the account.

## Assigning account roles to users

By default, when you add a user to your organization, they are granted the Member account role.

From the **Users** page of **Account Settings**, to change the account role for a user, from the **Role** dropdown list, select the role to assign.

<figure><img src="/files/upCnIZxmocbe7nM9TfNq" alt=""><figcaption><p>Role dropdown list for an account user</p></figcaption></figure>


---

# Agent Instructions: Querying This Documentation

If you need additional information that is not directly available in this page, you can query the documentation dynamically by asking a question.

Perform an HTTP GET request on the current page URL with the `ask` query parameter:

```
GET https://docs.tonic.ai/fabricate/fabricate-accounts-and-users/managing-account-users/account-roles.md?ask=<question>
```

The question should be specific, self-contained, and written in natural language.
The response will contain a direct answer to the question and relevant excerpts and sources from the documentation.

Use this mechanism when the answer is not explicitly present in the current page, you need clarification or additional context, or you want to retrieve related documentation sections.