My profile and preferences
Open My Profile from the avatar in the top bar.
Information
Your User name cannot be changed, and your Email only by an administrator. The fields stay disabled until your email address is confirmed.
Preferences
- Language Localization and Time Zone — the choice applies immediately and is remembered on every device. Instants such as "last modified" are shown in this time zone; calendar dates such as a due date are shown exactly as entered.
- Avatar Preference — Initials (choose a color), Identicon (a generated pattern) or Upload Photo. Uploaded photos are resized to a 512 px square automatically. Clicking your avatar at the top of the tabs opens this section directly.
- Email notifications — Send me notifications by email turns off the email copy of your notifications, including emails already waiting to go out; the notifications keep arriving in the bell. When your workspace's administrators turned these emails off for everyone, or your installation sends no email, the switch is off and cannot be changed. The link above the list on the notifications page opens this section.
- Welcome page — Show the welcome page again re-opens the short introduction you saw on your first sign-in, covering the help pages and the guided tours.
- Getting started card (administrators) — Show the getting started card again brings back the first steps you dismissed, and opens Home.
- Appearance — the Theme Mode (System follows your device) and the Color Palette apply to the whole app and are saved at once; Reset to default goes back to the standard colors and the System theme mode, which is also what you start with. The theme can also be picked under Appearance in the account menu (your avatar). It is saved with your profile and follows you across devices.
Password
The password rules apply.
Access Profile
My access roles lists the roles assigned to you, read-only. What you are allowed to do comes from the groups you belong to; ask an administrator if you need something you cannot do.
Security log
What happened to your own account, newest first: your sign-ins with the address and device they came from, sign-ins that were refused, password changes and resets, and any block, sign-out or role change an administrator applied. No permission is needed to see your own history. An address or device you do not recognise means someone else has your password: change it on the Password tab. The security log topic explains the columns and filters.
Sign-in methods
Ways to sign in besides your password, which keeps working whatever you add or remove here. The login page side is under Signing in with a passkey or Google.
- Passkeys: Add a passkey asks for a Name, such as the device it is on, then for your device's fingerprint, face or screen lock. An account holds up to ten. A passkey cannot be renamed: remove it and add it again. In a browser without passkeys the section says Passkeys are not available in this browser.
- Google account, where your provider offers Google sign-in: Link a Google account takes you to Google to choose the account. Back here, Link the Google account? names its address, and Link adds it: the section then shows Linked: with that address and Unlink. An account links one Google account, and a Google account linked to another account is refused. Unlink stops Google sign-in at once.
Every passkey added or removed and every Google account linked or unlinked appears in the Security log tab, which also shows how each sign-in was made.
The Users page
Users (in the side menu) lists everyone in your organization. You can open anyone's profile to see their name and contact details. For administrators, every user also shows a Status badge:
| Status | Meaning |
|---|---|
| Active | The user has confirmed their email and signed in at least once. |
| Invited | An invitation was sent; the user hasn't signed in yet. |
| Pending | The account exists but the user hasn't signed in yet. |
| Blocked | Sign-in is blocked until an administrator unblocks the user. |
Administrators also get matching pills in the filter bar — Administrators, Invited, Pending and Blocked — to narrow the list. With Invited active, the list adds Invited on and Invited by columns, so it doubles as the review of pending invitations.
Selecting a user opens their dashboard. For an invited user, a notice states when the invitation was last sent, by whom, and how many times it has gone out, with Resend invitation and Cancel invitation underneath it. Cancelling withdraws the invitation and removes the pending account; you can invite the person again later.
A second notice underneath tracks the link itself: Invitation link valid until the moment it stops working — 3 days after the last send — or The invitation link has expired. Resend the invitation to send a new one. once that moment has passed. A pending invitation whose link has expired looks the same in the list as one the person simply ignored, so this is where you tell the two apart.
Everything that affects the account's access lives together in the Security tab:
- the password reset options — send a reset email, or set a temporary password you hand over yourself;
- Block user, which signs the user out everywhere and stops them from signing in. Unblock user restores access with their existing password — blocking never resets the password;
- Sign out sessions, which signs the user out of every device without blocking the account;
- Remove user, which deletes the account after a confirmation. A user is not removed while a work item is still assigned to them (finished ones count), while they manage a work team, or while they are the account manager of a customer or a customer group: the message says which, and how many of each. Reassign those first, or block the user instead. Their place in work teams and groups goes with the account; the work items, comments and files they made stay;
- Sign-in methods: the user's passkeys (name, when each was added, whether it syncs) and, where Google sign-in is offered or one is linked, their Google account. Read-only: only the user adds or removes them, and Block user stops every one;
- underneath them, the account's Security log: its sign-ins, refused attempts, blocks and access changes, so "who blocked this user, and when" is answered on the same tab.
The Work Teams tab lists the work teams the user belongs to, with each team's manager and member count. Pick a team under Add to a work team and press Add to put the user in it — only teams they are not in yet are offered, and the tab says This user already belongs to every work team. once there are none left. On each row, next to Go to group, Remove user from this group takes the user out of that team after a confirmation. Either action changes only this user's membership and leaves the rest of the team's roster untouched.
Add new opens a single form. Fill in the person's name, username and email, then pick under How they get access whether to Email them an invitation, Generate a set-password link you pass on yourself, or Set a temporary password they must change the first time they sign in. Changing that choice keeps whatever you have already typed. If email sending is switched off for your application, the invitation option is not offered.
Both link options — the emailed invitation and the one you copy yourself — are valid for 3 days and work only once. After that, resend the invitation, or use the password reset options in the user's Security tab to issue a fresh link.
Invited people appear in the users list right away with the Invited status; resending or cancelling their invitation is done from their dashboard.