User profile
The user profile comes in two shapes: a self view of your own account and an admin view of any person in the tenant. Both share their layout and navigation, but differ in what they show.
#Your own profile page
The self view is your personal starting point. The header shows your avatar, a greeting, your email address, your role badge and the tenant you are currently working in. Three tabs sit below it.
| Tab | Content |
|---|---|
| Info | Name, email, role, last sign-in, member since, tenant info |
| Edit profile | Maintain first name, last name, display name and profile picture yourself |
| My devices | Every asset assigned to you, clickable |
Alongside them are shortcuts to settings, to My Workplace and to the form for raising a Raise a request.
#Maintaining your own profile
The Edit profile tab lets you change your identity fields without raising a ticket with administration.
| Field | Notes |
|---|---|
| First name | Up to 100 characters, synced with your HGE ID |
| Last name | Up to 100 characters, synced with your HGE ID |
| Display name | Up to 255 characters; appears in the sidebar, tickets and audit log |
| Profile picture | JPEG, PNG or WebP, 5 MB maximum; counts against the tenant's storage |
| Read-only for now — changing it requires re-verification |
#What happens when you save
- Your change goes to HGE ID first. If it is briefly unreachable nothing is saved and you get an error
- On success your profile updates in every tenant you belong to — HGE ID is the leading source for your identity
- The audit entry is written in the active tenant only, so the timeline does not run twice
- On your next sign-in all tenant profiles are reconciled automatically anyway
#Profile pictures
Profile pictures are handled deliberately differently from name and email: they stay in the app and are not passed to HGE ID, because a portrait is personal data and should not be spread across systems without need.
- Each tenant has its own picture; switching tenant picks up the one stored there
- If there is none, the picture from your HGE ID is used, otherwise your initials in Uslimato green
- Uploads count against the tenant's storage — if it is full, the upload is rejected
#Limits and safeguards
- At most 10 profile changes per hour, after which the app shows a wait time
- Input is validated: control characters are rejected, whitespace trimmed, an empty field clears the value
- Every successful change is written to the audit log; the path to the profile picture is deliberately not logged, for privacy reasons
#The admin view
Anyone holding the users:manage permission sees up to five tabs on a user's page.
| Tab | Content | Visible to |
|---|---|---|
| Info | Identity, role, last sign-in | Everyone |
| Assets | Every device assigned to that person | Everyone |
| Permissions | Groups and the rights derived from them | Everyone |
| Metrics | Activity overview | Administration |
| Audit | That person's 50 most recent audit entries | Administration |
Without the permission the last two tabs do not appear at all — and calling them directly is refused server-side, not merely hidden.
#Metrics
The tab sums up how active someone is: assigned assets, movements started, tickets raised, assigned and closed, plus first and last sign-in. Without an ITSM licence the ticket figures read 0.
#Audit
The 50 most recent entries where this person is recorded as the actor — with timestamp, action, the object concerned and, where captured, the IP address. The full history lives in the Audit log.