Your Profile & Account

Every signed-in user has a personal profile page for managing their own account — no administrator required. From it you can review your account details, update your display name and email, change your own password, and sign out. This is distinct from User Accounts, which is the Admin-only area for managing other people's accounts. Self-service is available from the console, the REST API, or the PowerShell module.

Available to every role

The profile page and its self-service actions work for any signed-in user — User, Helpdesk, Operator, or Admin. Editing your own profile and changing your own password never require elevated permissions. What each role can do elsewhere in Athena is covered in Roles & Permissions.

Opening your profile#

Your account appears in the user menu in the top-right corner of the console — a round badge showing your initials. Click it to open the menu, then choose Profile to open the profile page (its address is /profile). The same menu holds the Logout action.

Your account details#

The top of the page summarises who you are signed in as — your display name, your username, and a badge for your role. Below that, the Account information card lists the full set of fields:

Field	Editable?	Meaning
Username	No	Your login name. It is fixed for the life of the account and cannot be changed here.
Display name	Yes	The friendly name shown across the console and in the audit log.
Email	Yes	Optional email address. Leave it blank to clear it.
Role	No	Your assigned role. Only an administrator can change a role, from User Accounts.
Last login	No	Timestamp of your most recent successful sign-in.
Member since	No	When your account was created.

Editing your display name and email#

Change the display name or email in the Account information card and save. Both are optional to change — only the fields you edit are updated. Saving your profile is recorded in the audit log.

The header name refreshes on your next sign-in

The name shown in the top-right user menu comes from your sign-in session, so a new display name appears there the next time you sign in. The profile page itself shows the saved value immediately.

Changing your own password#

The Change password card lets you set a new password for yourself. You must supply your current password, then the new password twice (the two entries must match). Unlike an administrator reset, a self-service change always requires proving you know the existing password.

The new password must meet the same complexity policy used everywhere in Athena:

At least 8 characters (up to 100),
at least one uppercase letter,
at least one lowercase letter, and
at least one digit.

A password that fails the policy, or a wrong current password, is rejected and the password is left unchanged. Both successful and failed password changes are written to the audit log. Passwords are stored only as one-way BCrypt hashes — the server never keeps or returns a plaintext password.

Directory (SSO) accounts change their password in the directory

If you sign in through LDAP / Active Directory or another SSO provider, your account has no local password — Athena verifies you against the directory at each sign-in. The change-password action is refused for these accounts. Change your password with your directory or identity provider instead.

Signing out#

Choose Logout from the top-right user menu to end your console session and return to the sign-in screen. Every sign-out is recorded in the audit log. If you signed in through a single sign-on provider, logging out also ends your session with that provider so you are not silently signed back in.

REST API#

These self-service endpoints are rooted at api/auth and are available to any authenticated user (they act on your own account, identified from your session — there is no user ID to pass). They return the standard API envelope.

Method & path	Purpose
`GET api/auth/me`	Return your own profile — username, display name, email, role, last login, and creation time. `401` if you are not authenticated.
`POST api/auth/change-password`	Change your own password. Requires `currentPassword` and a policy-compliant `newPassword`. A wrong current password or a policy failure returns `400`; the operation is refused for directory (SSO) accounts.
`POST api/auth/logout`	End your session and record a sign-out in the audit log.

# Who am I?
GET /api/auth/me

# Change my own password (current password required)
POST /api/auth/change-password
{
  "currentPassword": "••••••••",
  "newPassword": "••••••••"
}

Self-service vs. administration

These api/auth endpoints only ever touch your account. To manage other people — create accounts, change roles, deactivate, delete, or perform an admin password reset — use the Admin-only api/users endpoints described in User Accounts.

PowerShell#

The Athena PowerShell module exposes the same self-service actions. Your password can be supplied as a SecureString so it is never typed in clear text; if you omit it, the cmdlet prompts securely.

# Show the account you are connected as
Get-AthenaCurrentUser

# Change your own password (prompts securely if omitted)
$current = Read-Host -AsSecureString "Current password"
$new     = Read-Host -AsSecureString "New password"
Set-AthenaPassword -CurrentPassword $current -NewPassword $new

Which cmdlet for which job

Get-AthenaCurrentUser returns the account you are currently connected as — handy for confirming your identity and role in a script. Set-AthenaPassword changes your own password and requires the current one; it is for self-service. To reset another user's password as an administrator, use Reset-AthenaUserPassword (see User Accounts).