Skip to main content

Profile

Overview

Users can view and edit their personal information in the Profile view.

Account

Username

The username is used to log in to the Dashboard and apps. Usernames cannot be changed. An admin must delete the old user and create a new one.

Display name

The display name shows the user's first and last name.

Display name cannot be changed if the admin has locked user profiles or if the user is from an external directory.

Primary email

This is the account's email. Apps can see this address and may send notifications to it. This can be set to an email address hosted on the server.

Primary email cannot be changed if the admin has locked user profiles or if the user is from an external directory.

Password recovery email

Account password reset emails are sent to this address. Set this to an email address not hosted on the server. If not set, it defaults to the primary email.

Password recovery email cannot be changed if the admin has locked user profiles or if the user is from an external directory.

Avatar

Apps that support OIDC can access and display the profile picture.

Avatar

Enabling 2FA

2FA provides an additional layer of protection on top of the user password. The admin can make it mandatory for users to set up 2FA.

The QR code that appears when enabling 2FA can be scanned with a TOTP app such as:

Qrcode

External directory

2FA cannot be enabled if the user is from an external directory that supports 2FA.

Disabling 2FA

If a user loses their 2FA device, an admin can reset it.

App passwords

App passwords provide a security measure for desktop, email, and mobile clients. For example, when trying a new mobile app from an untrusted vendor, generate a password that provides access to a specific app. This protects your main password from compromise.

Apppasswords Create

API tokens

Each user can create their own API tokens. Tokens can have a read-only or read-write scope. They can be restricted to a list of comma separated IPs or subnets.

Api Tokens Create

The token listing shows the last used time:

Api Tokens List

Language

The dashboard language can be set using the language selector. This overrides the global language set by the admin.

Account

Notification Settings

The notification settings allow per-user mail notification configuration.

Notification Settings