Guide 10
My Account
Your own profile, your password, your second factor, and how the Console looks and behaves for you.
| Page | Route | Entry point | Permission |
|---|---|---|---|
| Profile | /profile | The profile icon in the app header | Any signed-in account |
| Preferences | /preference | The gear icon in the app header, next to the profile | Any signed-in account |
Neither page is permission-gated. They are about your own account, so no resource permission is required to open them.
What you can do here
- As a signed-in administrator, I want one place showing my identity and account state, so that I can confirm who I am to the system.
- As a signed-in administrator, I want to see my tenant and its quota usage, so that I can buy or clean up before hitting a ceiling.
- As a signed-in administrator, I want to change my password myself, so that I can keep my account safe.
- As a signed-in administrator, I want to turn MFA on or off myself, so that I am not dependent on someone else.
- As a signed-in administrator, I want the interface in my language, timezone and theme, so that it fits how I work.
- As an administrator on a slow machine, I want to reduce visual effects, so that the console stays responsive.
- As an administrator with two machines, I want to move all my preferences between them, so that I do not set everything up twice.
Part 1 — Profile
1. What the page shows
| Card | Contents |
|---|---|
| Avatar | Avatar, nickname, email, status chip. |
| Basic information | Nickname, phone, MFA status, created / updated / last sign-in time, creator and last editor. |
| Roles | The roles assigned to you. Read-only and not clickable — this is not a management screen. |
| Permissions | The permissions those roles give you. Read-only. |
| Tenant information | Tenant name, tenant ID, controller domain, tenant creation time, subscription plan, licence period, licence status chip. Read-only. |
| Quota usage | Six resources with used / limit and a usage bar. Read-only. |
2. Editing and toolbar
| Button | Notes |
|---|---|
| Edit | Enter edit mode. Only the display name is editable. Switches to Save / Cancel. |
| Change password | See §3. |
| Enable MFA / Disable MFA | Whichever applies. See §4. |
| Refresh | Reloads the profile, the tenant record and the quota. |
3. Changing your password
- Select Change password.
- Fill in Current password, New password and Confirm password. Each field has a show/hide toggle.
- Select Confirm.
3.1 Validation
Validation runs as you type, and Confirm stays disabled until everything passes.
| Rule | Message shown when broken |
|---|---|
| Current password is required | ”Please enter your current password” |
| New password meets the password policy | The rule checklist under the field shows which rule fails |
| New password differs from the old one | ”New password cannot be the same as current password” |
| Confirmation is required | ”Please confirm your password” |
| The two new passwords match | ”Passwords do not match” |
3.2 The password policy
The New password field carries a permanently visible checklist of six rules that ticks and crosses live as you type. The field itself only turns red after you leave it, so you are not scolded mid-word.
| Rule | Requirement |
|---|---|
| Length | At least 12 characters |
| Upper case | At least 1 |
| Lower case | At least 1 |
| Digit | At least 1 |
| Special character | At least 1 non-letter, non-digit character (space counts) |
| Not your username | Must not contain your login email (case-insensitive) |
The same six rules apply to account activation (/auth/setup) and password reset (/auth/reset-password), so there is never a password that works in one place and not another.
3.3 After you submit
| Outcome | What happens |
|---|---|
| Success | A success notice, the dialog closes, and you are signed out immediately and returned to the sign-in page. Sign in again with the new password. |
| Failure | A failure notice; the dialog stays open so you can correct and retry. |
4. Multi-factor authentication
The toolbar shows exactly one of the two buttons, depending on whether your account currently has an authenticator enrolled.
4.1 Enabling MFA
- Select Enable MFA.
- Scan the QR code with your authenticator app, or copy the secret with the copy button and enter it manually.
- Type the six-digit code your app now shows.
- Confirm.
On success your MFA status becomes Enabled. On failure the dialog stays open so you can retry with the next code.
4.2 Disabling MFA
- Select Disable MFA.
- Enter your current password and a one-time code from your authenticator.
- Confirm.
On success your MFA status becomes Disabled.
Cancelling either dialog changes nothing. Nothing is enrolled or unenrolled until you confirm.
An administrator can also reset another account’s MFA — that clears the enrolled authenticator so the person can enroll again. See 08 · Administrators & Roles §2.
5. Tenant, licence and quota
The bottom of the profile page shows which tenant you belong to and what its licence covers. All of it is read-only — tenant and licence are managed by the vendor, not from the Console.
| Field | Notes |
|---|---|
| Tenant name | |
| Tenant ID | |
| Controller domain | |
| Tenant created at | |
| Subscription plan | POC / Basic / Pro / Enterprise / Custom |
| Licence period | Start and expiry dates |
| Licence status | Active / Expired / Suspended (chip on the card) |
5.1 Quota usage
Six resources, always in this order:
Members → Applications → Devices → Merak Node → Agentless seats → Agentless services
| Situation | Displayed as | Usage bar |
|---|---|---|
| Normal, with a limit | used / limit | Filled proportionally |
| No limit | used / Unlimited | Not filled |
| Not purchased (agentless seats only) | Not purchased | Not filled |
The bar changes colour as it fills: primary below 80 %, warning from 80 %, danger at 100 %. Over-quota clamps at full rather than overflowing.
5.2 When these sections cannot be read
Reading the tenant needs tenant:R and reading the quota needs license:R. Both come with every default role, but an account with no roles at all may be refused.
If that happens the section still renders — unreadable fields show -, and the quota card says “this account cannot retrieve quota information”. It is never treated as a fatal error and never spins forever.
The quota card has three states, and loading is not the same as unavailable: a spinner means “still loading”, the unavailable message means “loaded, and there is nothing”.
Part 2 — Preferences
Six settings, grouped into three blocks.
| Block | Sections |
|---|---|
| Appearance | Theme · Performance |
| Language & region | Language · Timezone |
| Data tables | Table columns · Default filters |
Everything here is stored on this device and synced across the tabs of this browser.
6. Appearance
6.1 Theme
Three options, each with an icon: Follow system, Light, Dark. The one in use is labelled In use; the others offer Apply. Applying switches immediately — the same effect as the theme toggle in the app header. “Follow system” tracks your operating system’s appearance.
6.2 Performance — reduce visual effects
Turning Reduce visual effects on downgrades the interface globally and immediately:
- Transitions and ripple effects are switched off.
- Blur-type filters are removed.
- Shadows collapse to a small three-step scale.
- Skeleton loading animations stop.
Loading spinners keep moving — an indeterminate progress animation is the information, so it is exempt.
The setting is off by default (opt in), and is loaded before the first paint after a reload, so you never see a frame of full effects first. Turning it off restores everything.
7. Language & region
7.1 Language
The language in use is labelled In use; the others offer Switch. Switching applies immediately — the same effect as the header’s language switcher. The available languages are English (en-US) and Traditional Chinese (zh-TW).
7.2 Timezone
Choose an IANA timezone from the dropdown, or Follow device to use whatever the browser detects. The setting is saved immediately.
Applies from the next repaint. Views already on screen that have not re-rendered keep the old timezone until something (navigating, refreshing a query) redraws them. Changing page or reloading makes the whole console consistent.
The timezone also governs how date-time filters (audit log, connection log) are entered and interpreted.
8. Data tables
8.1 Table columns
Lists every table whose columns you have customised, showing the column order, which are visible or hidden, and a visible / total count.
- Reset to default per table removes that customisation.
- If you have customised nothing, an empty state says all tables use their default columns.
Only customised tables are listed — tables still on their defaults do not appear.
8.2 Default filters
Lists every list page where you have saved a default filter. Each entry shows the filter fields that have a value as chips (field name plus a value preview), with sort fields rendered as “priority + field + ascending/descending arrow”, and a count of the fields with values.
- Clear default per list removes that saved filter.
- If you have saved none, an empty state says so.
You can also save and clear a default from the filter panel of any list page itself — see 09 · Bulk Operations §5.2.
9. Moving your preferences to another machine
The page title bar carries Export and Import, covering all six dimensions at once: theme, reduced effects, language, timezone, table columns, default filters.
Export downloads a single file, merak-preferences.json. It writes only the dimensions that differ from the default — so if everything is on defaults, the exported file is {}. The button is never disabled.
Import validates the file, then applies it as an authoritative replace:
- Dimensions present in the file are applied.
- Dimensions absent from the file are reset to their default.
- Therefore importing
{}resets all six dimensions.
An invalid file shows a failure notice; cancelling the file picker shows nothing.
⚠️ Language is not fully portable between machines. Language counts as “default” when it equals that device’s browser language, and defaults are omitted from the export. So an all-default export from a
zh-TWmachine ({}) will land on the device default (en-US) when imported on anen-USmachine. This is deliberate device-default behaviour. Theme, timezone, table columns and default filters are explicit values and restore exactly.
10. Permission summary
| Task | Permission |
|---|---|
| Open Profile and Preferences | None — any signed-in account |
| Edit your own display name | None |
| Change your own password | None |
| Enable / disable your own MFA | None |
| See tenant information | tenant:R (degrades to - without it) |
| See licence and quota | license:R (degrades to a notice without it) |
Next
- Interface conventions and navigation: 01 · Getting Started §5
- Manage the tables and filters listed here: 09 · Bulk Operations §5