Profile Management

Your own account settings, from appearance and table preferences to your password, access tokens and recent activity.

Open

Avatar › Profile Settings

Tabs

General · Appearance · Tables · Security · Activity

The Profile page lets you view and manage your personal account settings. To open it, click your avatar at the bottom of the left-hand rail and select Profile Settings. Profile sits in You, the area for your own pages, beside Notifications, My Access and Connect an AI client.

The page is organized into five tabs: General, Appearance, Tables, Security, and Activity.

Zoom

Profile page with header, role badges, and tab navigation

---

Profile Header

The header section appears at the top of the page and displays your key account information at a glance:

Element	Description
Profile Picture	Your avatar image. Click to upload a new picture or remove the existing one.
Full Name	Your first and last name.
Email	The email address associated with your account.
Role Badges	Your assigned roles (visible when RBAC is enabled).
Account Status	Your current account status (e.g., Active).
Member Since	The date your account was created.
Last Login	The date and time of your most recent sign-in.

Uploading a Profile Picture

1. Click on your avatar or the upload area in the header.
2. Select an image file from your device (JPEG, PNG, or WebP).
3. The picture updates immediately after upload.

To remove your profile picture, click the delete option on the avatar. Your initials will be displayed instead.

---

General Tab

The General tab displays your basic profile information and allows you to update your name.

Field	Editable	Description
First Name	Yes	Your first name.
Last Name	Yes	Your last name.
Email	No	Your email address. This is set at account creation and cannot be changed.

Editing Your Profile

1. Click the Edit button to enable the form fields.
2. Update your First Name or Last Name.
3. Click Save Changes to apply your updates, or Cancel to discard them.

info

Your email address is read-only and cannot be modified. If you need to change your email, contact your system administrator.

---

Appearance Tab

The Appearance tab lets you customize the look and feel of the application.

Theme

Choose one of six themes: Light, Light Green, Light Blue, Dark, Dark Green or Dark Blue. Your selection is saved automatically and persists across sessions.

Page Cover

Pick a wallpaper (a gradient or artwork) to show behind your workspace. It is hidden on canvas pages such as the pipeline designer.

Full-Width Layout

Toggle the Full-Width Layout switch to expand the application content to use the full width of your browser window. When disabled, content is displayed in a centered, contained layout.

Favorite Pages

Check the pages you use most. They appear behind the star in the top bar, one click away from anywhere.

Snow Effect

A decorative snow animation that overlays the application.

Control	Description
Enabled	Toggle the snow effect on or off.
Quantity	Adjust the number of snowflakes using the slider (5-250). Only visible when the effect is enabled.

---

Tables Tab

Display preferences for every data table in the application. They are saved for you alone, in this browser.

Control	Description
Default Items per Page	Rows per page in every table: 5, 10, 20, 50 or 100.
Show User Avatars	Show profile pictures in table columns that name a user.
Enable Hover Pagination	Show previous and next page buttons when you hover over a table's pagination controls.
Reset to Defaults	Restore all table settings to their default values.

---

Security Tab

The Security tab provides two features: changing your password and managing personal access tokens.

Changing Your Password

To update your password:

1. Enter your Current Password.
2. Enter a New Password. A strength indicator will display feedback as you type.
3. Enter the new password again in the Confirm New Password field.
4. Click Change Password.
5. Confirm the action in the dialog that appears.

Accounts that sign in with single sign-on

If your account was created by your identity provider (OIDC, SAML or LDAP), it has no MaestroHub password. The Password Security card then says Your password is managed by your identity provider instead of showing the form: change or reset your password with your identity provider. If you need a MaestroHub password as well, ask an administrator to set one. You cannot create it yourself. Personal access tokens work either way.

New passwords must meet the following requirements:

Requirement	Default
Minimum length	8 characters
Uppercase letter	Required
Lowercase letter	Required
Number	Required
Special character	Optional

The strength indicator rates your password as Weak, Fair, Good, or Strong based on length, character variety, and complexity.

tip

Choose a password that is at least 12 characters long and includes a mix of uppercase letters, lowercase letters, numbers, and special characters for the best security.

---

Personal Access Tokens

Personal Access Tokens (PATs) allow you to authenticate with the MaestroHub API without using your password. They are useful for CI/CD pipelines, scripts, and third-party integrations.

The token table displays the following information for each token:

Column	Description
Name	The name you assigned to the token.
Scopes	Color-coded badges showing the permissions granted to the token.
Created	The date the token was created.
Last Used	The date the token was last used for authentication.
Expires	The expiration date of the token.
Status	Current state: Active, Expired, or Revoked.

Creating a Token

1. Click Create Token to open the creation dialog.
2. Enter a Token Name (max 255 characters). Use a descriptive name like "CI/CD Pipeline" or "Monitoring Script".
3. Select an Expiration period: 30 days, 90 days, 180 days, or 1 year.
4. Under Workspace, list the workspaces the token works in. It starts with the workspace you are in; when you belong to more than one, use Add workspace to add others and the × on a workspace to remove it. The token is refused in any workspace it does not name.
5. If RBAC is enabled, choose the Permissions for each workspace. Your role can differ between workspaces, so each one has its own list: click a workspace to edit its list. Select individual scopes, toggle a whole group, or use a shortcut: Select all, Read-only (every Read scope), or a preset such as Build apps (for an AI assistant that builds App Studio apps over MCP; App Studio is in release 3.0 as Beta, a paid add-on).
6. Click Create Token.

Zoom

Creating a token: the workspace it works in, the shortcut buttons and the scopes for that workspace

Important

After creation, the token value is displayed only once. Copy it immediately and store it in a secure location. You will not be able to view the token value again.

Zoom

The token value is shown once, with a copy button

Available Scopes

When RBAC is enabled, you can assign specific permissions to your tokens. The dialog offers only the scopes your roles in that workspace fully allow: you can grant only permissions your own role holds there. A scope is a ceiling: the token can never do more than your roles allow at the time it is used. Every scope, with what it grants, is listed under API Authentication › Available Scopes.

info

When RBAC is not enabled, tokens are created without scope restrictions; they have the full access of your account in the workspaces they name.

Revoking a Token

To revoke a token, click the Revoke action on the token row and confirm in the dialog. Revoked tokens are immediately invalidated and can no longer be used for authentication.

Limits

• You can have a maximum of 50 active tokens at any time.
• Token expiration cannot exceed 1 year.

---

Activity Tab

The Activity tab provides a read-only summary of your account activity.

Field	Description
Account Created	The date and time your account was created.
Last Updated	The date and time your profile was last modified.
Last Login	The date and time of your most recent sign-in.
User ID	Your unique system identifier.