How do I manage my profile?

Requires Basic

Quick answer

Open the “Profile” page via the user menu in the top right. There you’ll see your name, your email, and your role; you can change your password, manage your 2FA devices, and view devices assigned to you under “My devices”. Switch your language via the language switcher (globe icon) or under “Settings”.

Prerequisites

Required role Signed-in user

— everyone manages their own profile. Name, email address, and role are maintained by an administrator (see Users & Roles) and can’t be edited here yourself.

Instructions

GUI (web interface)

1. Open your profile. Click your user menu (avatar) in the top right and choose “Profile”. The profile card shows your name, email, and role.

   Screenshot pending erste-schritte-profil-01 Profile page with the profile card (name, email, role) and the 'Change password' form

   The profile page with the profile card and password change.

2. Change your password. Fill in “Current password”, “New password”, and “Confirm password” (the new password and its confirmation must match) and click “Save”. On success, “Password changed successfully” appears.

   Screenshot pending erste-schritte-profil-02 'Change password' form with the fields Current password, New password, and Confirm password

   Changing your password: first the current one, then the new one twice.

3. My devices. The “My devices” section lists the devices currently assigned to you (via issue/return), along with the issue date. Use the download icon to download the corresponding receipt.

   Screenshot pending erste-schritte-profil-03 'My devices' section with a list of assigned devices and a download button for the receipt

   'My devices' shows the devices assigned to you, with a receipt download.

4. 2FA devices. Further down, you manage your authenticator devices — details under Set up 2FA.

5. Switch language. Choose your language via the language switcher (globe icon, top right) or under “Settings”. German and English are always available; your choice is saved to your account.

API (curl)

You read your own profile via /api/v1/auth/me:

Read your own profile

curl -H "Authorization: Bearer inv_dein_token" \
  https://demo.notory.io/api/v1/auth/me

Response (200 OK, abridged)

{
  "id": "b7c3a1e2-4f5d-4a90-8c11-2d6e9f0a1b23",
  "email": "max.mustermann@example.com",
  "first_name": "Max",
  "last_name": "Mustermann",
  "role": "asset_manager",
  "tenant_id": "3d9b0c12-4e5a-4f88-b1c7-2a9e6d4f0011",
  "totp_enabled": true,
  "language": "de",
  "last_login": "2026-07-08T09:14:22Z"
}

You change the password by providing the old and new password:

Change password

curl -X POST https://demo.notory.io/api/v1/auth/password/change \
  -H "Authorization: Bearer inv_dein_token" \
  -H "Content-Type: application/json" \
  -d '{
    "old_password": "aktuelles-passwort",
    "new_password": "neues-sicheres-passwort"
  }'

Response (200 OK)

{ "message": "Password changed successfully" }

You set your preferred language via PATCH:

Set language

curl -X PATCH https://demo.notory.io/api/v1/auth/me/language \
  -H "Authorization: Bearer inv_dein_token" \
  -H "Content-Type: application/json" \
  -d '{ "language": "de" }'

Possible errors: 400 (the current password is wrong), 401 (not logged in / invalid token).

What happens behind the scenes?

• Password change: Notory first checks your old password. The new one must be at least 8 characters. If an administrator set your password, changing it clears the “must set a password” requirement (must_change_password). The change is logged in the audit log.
• Name, email, role: These fields are managed by an administrator in user management — they can’t be edited in the profile yourself. Your role determines, via permissions (RBAC), what you’re allowed to do in Notory.
• Language: Your choice is stored per account (language) and used for the interface and system emails (for example password reset, invitation). German and English are always available; additional languages are enabled by the instance.
• My devices: This section shows assets assigned to you via issue/return; receipts are available as PDF.
• Session & logout: Your account works with HttpOnly session cookies. Via the user menu → “Log out”, the cookies are deleted and the session ends.

Related topics

• Log in
• Set up 2FA
• Reset your password — if you can’t log in
• Interface tour — language switcher & user menu
• Users & Roles — maintaining name, role, and permissions