Chapters My Account

Guide 10

My Account

Your own profile, your password, your second factor, and how the Console looks and behaves for you.

Updated

PageRouteEntry pointPermission
Profile/profileThe profile icon in the app headerAny signed-in account
Preferences/preferenceThe gear icon in the app header, next to the profileAny signed-in account

Neither page is permission-gated. They are about your own account, so no resource permission is required to open them.

What you can do here

  • As a signed-in administrator, I want one place showing my identity and account state, so that I can confirm who I am to the system.
  • As a signed-in administrator, I want to see my tenant and its quota usage, so that I can buy or clean up before hitting a ceiling.
  • As a signed-in administrator, I want to change my password myself, so that I can keep my account safe.
  • As a signed-in administrator, I want to turn MFA on or off myself, so that I am not dependent on someone else.
  • As a signed-in administrator, I want the interface in my language, timezone and theme, so that it fits how I work.
  • As an administrator on a slow machine, I want to reduce visual effects, so that the console stays responsive.
  • As an administrator with two machines, I want to move all my preferences between them, so that I do not set everything up twice.

Part 1 — Profile

1. What the page shows

CardContents
AvatarAvatar, nickname, email, status chip.
Basic informationNickname, phone, MFA status, created / updated / last sign-in time, creator and last editor.
RolesThe roles assigned to you. Read-only and not clickable — this is not a management screen.
PermissionsThe permissions those roles give you. Read-only.
Tenant informationTenant name, tenant ID, controller domain, tenant creation time, subscription plan, licence period, licence status chip. Read-only.
Quota usageSix resources with used / limit and a usage bar. Read-only.

2. Editing and toolbar

ButtonNotes
EditEnter edit mode. Only the display name is editable. Switches to Save / Cancel.
Change passwordSee §3.
Enable MFA / Disable MFAWhichever applies. See §4.
RefreshReloads the profile, the tenant record and the quota.

3. Changing your password

  1. Select Change password.
  2. Fill in Current password, New password and Confirm password. Each field has a show/hide toggle.
  3. Select Confirm.

3.1 Validation

Validation runs as you type, and Confirm stays disabled until everything passes.

RuleMessage shown when broken
Current password is required”Please enter your current password”
New password meets the password policyThe rule checklist under the field shows which rule fails
New password differs from the old one”New password cannot be the same as current password”
Confirmation is required”Please confirm your password”
The two new passwords match”Passwords do not match”

3.2 The password policy

The New password field carries a permanently visible checklist of six rules that ticks and crosses live as you type. The field itself only turns red after you leave it, so you are not scolded mid-word.

RuleRequirement
LengthAt least 12 characters
Upper caseAt least 1
Lower caseAt least 1
DigitAt least 1
Special characterAt least 1 non-letter, non-digit character (space counts)
Not your usernameMust not contain your login email (case-insensitive)

The same six rules apply to account activation (/auth/setup) and password reset (/auth/reset-password), so there is never a password that works in one place and not another.

3.3 After you submit

OutcomeWhat happens
SuccessA success notice, the dialog closes, and you are signed out immediately and returned to the sign-in page. Sign in again with the new password.
FailureA failure notice; the dialog stays open so you can correct and retry.

4. Multi-factor authentication

The toolbar shows exactly one of the two buttons, depending on whether your account currently has an authenticator enrolled.

4.1 Enabling MFA

  1. Select Enable MFA.
  2. Scan the QR code with your authenticator app, or copy the secret with the copy button and enter it manually.
  3. Type the six-digit code your app now shows.
  4. Confirm.

On success your MFA status becomes Enabled. On failure the dialog stays open so you can retry with the next code.

4.2 Disabling MFA

  1. Select Disable MFA.
  2. Enter your current password and a one-time code from your authenticator.
  3. Confirm.

On success your MFA status becomes Disabled.

Cancelling either dialog changes nothing. Nothing is enrolled or unenrolled until you confirm.

An administrator can also reset another account’s MFA — that clears the enrolled authenticator so the person can enroll again. See 08 · Administrators & Roles §2.


5. Tenant, licence and quota

The bottom of the profile page shows which tenant you belong to and what its licence covers. All of it is read-only — tenant and licence are managed by the vendor, not from the Console.

FieldNotes
Tenant name
Tenant ID
Controller domain
Tenant created at
Subscription planPOC / Basic / Pro / Enterprise / Custom
Licence periodStart and expiry dates
Licence statusActive / Expired / Suspended (chip on the card)

5.1 Quota usage

Six resources, always in this order:

Members → Applications → Devices → Merak Node → Agentless seats → Agentless services

SituationDisplayed asUsage bar
Normal, with a limitused / limitFilled proportionally
No limitused / UnlimitedNot filled
Not purchased (agentless seats only)Not purchasedNot filled

The bar changes colour as it fills: primary below 80 %, warning from 80 %, danger at 100 %. Over-quota clamps at full rather than overflowing.

5.2 When these sections cannot be read

Reading the tenant needs tenant:R and reading the quota needs license:R. Both come with every default role, but an account with no roles at all may be refused.

If that happens the section still renders — unreadable fields show -, and the quota card says “this account cannot retrieve quota information”. It is never treated as a fatal error and never spins forever.

The quota card has three states, and loading is not the same as unavailable: a spinner means “still loading”, the unavailable message means “loaded, and there is nothing”.


Part 2 — Preferences

Six settings, grouped into three blocks.

BlockSections
AppearanceTheme · Performance
Language & regionLanguage · Timezone
Data tablesTable columns · Default filters

Everything here is stored on this device and synced across the tabs of this browser.

6. Appearance

6.1 Theme

Three options, each with an icon: Follow system, Light, Dark. The one in use is labelled In use; the others offer Apply. Applying switches immediately — the same effect as the theme toggle in the app header. “Follow system” tracks your operating system’s appearance.

6.2 Performance — reduce visual effects

Turning Reduce visual effects on downgrades the interface globally and immediately:

  • Transitions and ripple effects are switched off.
  • Blur-type filters are removed.
  • Shadows collapse to a small three-step scale.
  • Skeleton loading animations stop.

Loading spinners keep moving — an indeterminate progress animation is the information, so it is exempt.

The setting is off by default (opt in), and is loaded before the first paint after a reload, so you never see a frame of full effects first. Turning it off restores everything.

7. Language & region

7.1 Language

The language in use is labelled In use; the others offer Switch. Switching applies immediately — the same effect as the header’s language switcher. The available languages are English (en-US) and Traditional Chinese (zh-TW).

7.2 Timezone

Choose an IANA timezone from the dropdown, or Follow device to use whatever the browser detects. The setting is saved immediately.

Applies from the next repaint. Views already on screen that have not re-rendered keep the old timezone until something (navigating, refreshing a query) redraws them. Changing page or reloading makes the whole console consistent.

The timezone also governs how date-time filters (audit log, connection log) are entered and interpreted.

8. Data tables

8.1 Table columns

Lists every table whose columns you have customised, showing the column order, which are visible or hidden, and a visible / total count.

  • Reset to default per table removes that customisation.
  • If you have customised nothing, an empty state says all tables use their default columns.

Only customised tables are listed — tables still on their defaults do not appear.

8.2 Default filters

Lists every list page where you have saved a default filter. Each entry shows the filter fields that have a value as chips (field name plus a value preview), with sort fields rendered as “priority + field + ascending/descending arrow”, and a count of the fields with values.

  • Clear default per list removes that saved filter.
  • If you have saved none, an empty state says so.

You can also save and clear a default from the filter panel of any list page itself — see 09 · Bulk Operations §5.2.

9. Moving your preferences to another machine

The page title bar carries Export and Import, covering all six dimensions at once: theme, reduced effects, language, timezone, table columns, default filters.

Export downloads a single file, merak-preferences.json. It writes only the dimensions that differ from the default — so if everything is on defaults, the exported file is {}. The button is never disabled.

Import validates the file, then applies it as an authoritative replace:

  • Dimensions present in the file are applied.
  • Dimensions absent from the file are reset to their default.
  • Therefore importing {} resets all six dimensions.

An invalid file shows a failure notice; cancelling the file picker shows nothing.

⚠️ Language is not fully portable between machines. Language counts as “default” when it equals that device’s browser language, and defaults are omitted from the export. So an all-default export from a zh-TW machine ({}) will land on the device default (en-US) when imported on an en-US machine. This is deliberate device-default behaviour. Theme, timezone, table columns and default filters are explicit values and restore exactly.


10. Permission summary

TaskPermission
Open Profile and PreferencesNone — any signed-in account
Edit your own display nameNone
Change your own passwordNone
Enable / disable your own MFANone
See tenant informationtenant:R (degrades to - without it)
See licence and quotalicense:R (degrades to a notice without it)

Next