# Limitations on IAM resources
Cognite Data Fusion (CDF) limits the number of IAM (Identity and Access Management) resources you can create. If you exceed the limits, you need to remove existing resources before you can create new ones.
|API keys (per service account)||5|
|Service accounts (per project)||700||Different applications should not share the same service accounts.|
|Groups (per project)||50|
|Groups (per principal)||20|
|Security categories (per project)||1000|