Settings
Per-user settings — profile, password and MFA, display preferences, and AI provider configuration. The knobs every user controls for their own account.
Settings is your personal account surface — separate from Administration, which is for managing other people's accounts. Every user sees Settings; only admins see Administration.
What lives here
Settings breaks down into four areas:
Profile
Name, email, group memberships, and account activity — saved query counts, last login, verification status.
Security
Change password, configure auto-logout, enable TOTP two-factor authentication, manage backup codes.
Appearance
Theme (light/dark), display timezone, date and time formats, Class Browser detail-panel sections.
AI provider
Bring your own API key for the AI query builder, or point at a local Ollama instance. Test and switch providers.
Notification preferences aren't listed here — they have their own page under Notifications because they're a first-class subsystem rather than a generic setting.
What you can't change from here
- Your username. Chosen at account creation, permanent.
- Your group memberships. An admin assigns these; you see them on the Profile page but can't edit.
- Quotas and permissions. Set by your group. If you need more, ask an admin.
- Deployment-wide settings like SMTP, LDAP, or audit retention. Those live in Administration and environment configuration — not here.
Changes take effect immediately
Every setting on these pages saves on change. There's no bulk "Apply" button, no draft state. Theme flips on the next render; password takes effect on the next login; AI provider change affects your next AI-builder request.
One exception: MFA enrollment is a multi-step flow — QR code → verify TOTP code → save backup codes. MFA isn't active until you complete all three steps. If you abandon halfway through, the setup is discarded and you can start over.
If you're on LDAP
Users whose accounts originated from LDAP have two restrictions:
- Password is managed by the directory. The change-password panel shows a short message pointing you at your LDAP admin instead of a form. Reset your directory password, and your Fabrik login updates on next authentication.
- Profile fields like name and email may be auto-synced. If
AUTH_LDAP_ALWAYS_UPDATE_USERis on, editing these in Fabrik is pointless — LDAP overwrites them on next login. The UI still accepts the edit, but expect it to revert.
Everything else — MFA, preferences, AI provider — works the same as for local accounts.