Docs/Getting Started/Profile and Account

Profile and Account

Product version: 1.0.0+1 Last updated: 2026-08-03 Audience: Tenant Owners, Tenant Employees, Regular Users

Profile Hub Overview

The Profile Hub manages your personal account (identity, security, sign-in provider, and account status). Changes apply to your user identity across organizations you belong to.

To open it:

  1. Tap your avatar in the shell app bar.
  2. Select Profile (/profile).

From the hub you can open:

Action Path
Edit profile /profile/edit
Change password /profile/password (hidden when the account has no local password — e.g. Google-only)

The hub shows section cards for identity, security, connections (sign-in provider, read-only), and account metadata, plus a danger zone (deactivate / delete account).

Language and theme are not on the Profile Hub — they live on the Settings hub (/settings) under app preferences. See Settings overview.

Editing Display Name

Your display name appears in navigation, audit entries, notifications, and member lists.

  1. Open Edit profile (/profile/edit).
  2. Update first and/or last name.
  3. Save.

Display names are not unique; email identifies the account.

Changing Email Address

  1. Open Edit profile.
  2. Enter the new email and save.
  3. A verification OTP is sent to the new address.
  4. Complete verification when prompted.
Aspect Detail
Sign-in Use the new email after verification.
Google Sign-In Google identity remains tied to the Google account used at sign-in.
Until verified Continue using the previous verified email for sign-in until the change is confirmed.

Changing Password

  1. Profile Hub → Change password (/profile/password).
  2. Enter current password, new password (meets strength rules), and confirm.
  3. Save.

After changing

  • A security confirmation may be sent by email (notification service).
  • The server deletes all sessions for your user (every device). You may need to sign in again on this device when the access token expires or refresh fails; other devices must sign in again.

If you signed in only with Google and have no local password, the password page is not offered — manage password through Google.

Profile Picture

  1. On the Profile Hub, tap the avatar / change-photo control.
  2. Pick an image (file picker / gallery as offered by the platform).
  3. The app uploads via media, then saves the URL on your profile (PUT /me).

If upload fails or the file is too large, an error snackbar is shown. Without a picture, initials are used.

Connections

The Connections card shows how you sign in (e.g. local email/password or Google). There is no in-app unlink / link-provider API in the current product.

Deactivate or Delete Account

From the Profile Hub danger zone:

Action Effect
Deactivate Soft-deactivates your account (POST /me/deactivate). You are signed out. Reactivate later via /account-reactivate (email/password accounts).
Delete account Same soft-deactivate path (DELETE /me) — account is deactivated, not hard-removed from the database.

Both actions require provider-aware confirmation:

  • Email/password (local): enter your current password.
  • Google: complete a fresh Google Sign-In (account picker); the app sends the new ID token for server verification.

A client-side “already reauthenticated” flag is never accepted alone. Success clears local session tokens, signs you out, and unregisters the push device when wired (SessionBootstrap).

Sessions

There is no device-session list or remote revoke screen. Sign out from the avatar menu or Profile Hub ends the current client session. Password change and password reset invalidate all server sessions for the user.

See Signing In for token header behavior.

Related: Signing In | Create Organization | Settings overview