Profile
Overview
Users can view and edit their personal information in the Profile view.

Username
The username is used to log in to the Dashboard and apps. Usernames cannot be changed. An admin must delete the old user and create a new one.
Display name
The display name shows the user's first and last name.
Display name cannot be changed if the admin has locked user profiles or if the user is from an external directory.
Primary email
This is the account's email. Apps can see this address and may send notifications to it. This can be set to an email address hosted on the server.
Primary email cannot be changed if the admin has locked user profiles or if the user is from an external directory.
Password recovery email
Account password reset emails are sent to this address. Set this to an email address not hosted on the server. If not set, it defaults to the primary email.
Password recovery email cannot be changed if the admin has locked user profiles or if the user is from an external directory.
Avatar
Apps that support OIDC can access and display the profile picture.
![]()
Enabling 2FA
2FA provides an additional layer of protection on top of the user password. The admin can make it mandatory for users to set up 2FA.
The QR code that appears when enabling 2FA can be scanned with a TOTP app such as:

2FA cannot be enabled if the user is from an external directory that supports 2FA.
Disabling 2FA
If a user loses their 2FA device, an admin can reset it.
App passwords
App passwords provide a security measure for desktop, email, and mobile clients. For example, when trying a new mobile app from an untrusted vendor, generate a password that provides access to a specific app. This protects your main password from compromise.
API tokens
Each user can create their own API tokens. Tokens can have a read-only or read-write scope. They can be restricted to a list of comma separated IPs or subnets.

The token listing shows the last used time:

Language
The dashboard language can be set using the language selector. This overrides the global language set by the admin.

Notification Settings
The notification settings allow per-user mail notification configuration.
