# Fabricate account structure

At a high level, a Fabricate Account has the following structure:

<figure><img src="https://4109733485-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2FmoU4gTR9LxlzHeWmQCUZ%2Fuploads%2F7vEEn1bj5O0daazBp8kK%2FDiagram_Workspaces.png?alt=media&#x26;token=84420fe9-9914-4934-b858-9406691b3b65" alt=""><figcaption><p>Diagram showing the structure of an account</p></figcaption></figure>

## Account users

{% hint style="info" %}
The Free and Plus plans only allow one user per account.
{% endhint %}

A Fabricate account contains at least one user.

Enterprise accounts can have multiple users, and can use [single sign-on (SSO)](https://docs.tonic.ai/fabricate/fabricate-accounts-and-users/managing-account-users/single-sign-on-sso) to manage user access. A user is assigned an [account role](https://docs.tonic.ai/fabricate/fabricate-accounts-and-users/managing-account-users/account-roles), which determines the actions the user can perform in the account.

## API keys

To use the Fabricate API, an account must have at least one [Fabricate API key](https://docs.tonic.ai/fabricate/fabricate-api-and-cli/managing-fabricate-api-keys).

## Domains

Accounts can have available [domains](https://docs.tonic.ai/fabricate/fabricate-accounts-and-users/account-domains) to use for database workflows, SSO, and to write to Amazon S3.

## Workspaces

{% hint style="info" %}
The Free and Plus plans only allow one workspace per account.
{% endhint %}

Each Fabricate account contains at least one workspace. Enterprise accounts can have multiple workspaces. For example, each workspace might represent a different team.

When you create your Fabricate account, Fabricate automatically creates a workspace with your name. If you don't create other workspaces, then all of your databases are in that workspace.

### Databases

Workspaces contain one or more databases, which can include a local database, where the data is generated within Fabricate, and connections to external databases.

### Assigned users and API keys

A workspace can be assigned a set of account users and API keys. Each user and API key is assigned a [workspace role](https://docs.tonic.ai/fabricate/workspaces/configuring-access-to-a-workspace) that controls their access to workspace functions.

### Secrets for domain connections

Within a workspace, you can configure [secrets](https://docs.tonic.ai/fabricate/workspaces/workspace-secrets) to use to connect to account domains.

### Custom skills

You can also configure [custom skills](https://docs.tonic.ai/fabricate/data-agent-databases/creating-and-using-custom-skills) for the Data Agent to use when it performs specific tasks.