> For the complete documentation index, see [llms.txt](https://docs.guardianservice.app/llms.txt). Markdown versions of documentation pages are available by appending `.md` to page URLs; this page is available as [Markdown](https://docs.guardianservice.app/technical-information/users/user-operations/profile-reference.md). # Profile Reference Field-level reference for the MGS Profile page. The Profile page is where the Hedera account, identity documents, relayer accounts, credentials, and per-account settings are inspected and updated. It opens under the heading **Profile**, described as your account, security, Hedera identity, and identity documents for this workspace. ## Tabs | Tab | Standard Registry | Regular User | Description | | ------------------------ | ----------------- | ------------ | -------------------------------------------------------------------------------------------- | | General | Yes | Yes | Account summary, Hedera network details, identity documents, MGS account, and configuration. | | Relayer Accounts | Yes | Yes | Hedera accounts used to pay for transactions on the account's behalf. | | Decentralized Access Key | No | Yes | Keys generated or imported for decentralized policy access. | | Credentials | Yes | Yes | External service credentials, global and per policy. | ## General tab ### Account card | Property | Type | Description | | --------- | ------ | ------------------------------------------------------------------------------------------------------------------------------------------------ | | Username | string | Account login name, shown with initials as an avatar. | | Role | string | Account role, `Standard Registry` or `User`. | | Balance | string | Current HBAR balance of the operator account. | | Email | string | Email address on the account, with **Change** to update it. A confirmation step verifies ownership of the new address before the change applies. | | Tenant ID | string | Identifier of the MGS tenant, with a copy control. Quote it when raising a support request. | ### Hedera network card | Property | Type | Required | Description | | ---------- | ------ | ---------------------- | ------------------------------------------------------------------------------- | | Account ID | string | Yes | Hedera operator account ID, linked to the explorer and copyable. | | User Topic | string | No | Hedera topic holding the account's own messages. Hidden until the topic exists. | | Init Topic | string | Standard Registry only | Parent topic the Standard Registry was initialized from. | ### Identity card | Property | Type | Description | | ----------------- | ------ | ----------------------------------------------------------------------------- | | Standard Registry | string | Regular User only. DID of the Standard Registry the user is registered with. | | DID | string | Decentralized Identifier of the account, copyable. | | DID Document | action | **View** opens the account's DID document in a viewer dialog. | | VC Document | action | **View** opens the account's Verifiable Credential. Hidden when no VC exists. | ### MGS Account card This card is specific to MGS and has no upstream Guardian equivalent. | Property | Type | Description | | ----------------------- | ------ | ------------------------------------------------------------------------------------------------------------------------------------------------ | | Organization management | string | Who holds the account's keys, for example `MGS management`. | | Account type | string | `ATP` when automatic top-up is enabled, otherwise `Self management`. | | Automatic Top-up | action | **Migrate to ATP** moves the account onto Automatic Transaction Processing. Shown while the account type is `Self management`. | | Migrate keys to Vault | action | **Migrate Keys** moves the account's keys out of ATP custody and into the MGS Vault. Shown in place of the row above once the account is on ATP. | | Ownership transfer | action | **Transfer ownership** starts the ownership transfer flow. | ### Configuration card | Property | Type | Default | Standard Registry | Regular User | Description | | ------------------------- | ------ | --------- | ----------------- | ------------ | ---------------------------------------------------------------------------------- | | First Steps | toggle | Off | Yes | Yes | Shows the First Steps tutorial toggle in the side menu. | | Two-factor authentication | toggle | Off | Yes | Yes | Requires an authenticator code at sign-in. | | Password | action | | Yes | Yes | Opens the change-password dialog. | | Theme | select | System | Yes | Yes | A **Light**, **Dark**, **System** control. Appearance for the current device only. | | Menu layout | select | Side rail | No | Yes | Navigation as a side rail or a top bar, for the current device. | {% hint style="info" %} MGS does not show the **Documentation** or **Experimental UI** toggles that appear in upstream Guardian. The Documentation widget points at Hedera Guardian's own documentation, which is off-brand for white-labeled tenants, and MGS already ships the current interface by default, so an experimental switch would only expose unfinished screens. {% endhint %} ## Relayer Accounts tab | Column | Type | Description | | ----------- | ------ | -------------------------------------------------------------------- | | Account | string | Hedera account ID, linked to the explorer. | | Balance | string | Cached HBAR balance, refreshed on demand. | | Update date | string | Time of the last balance refresh, with a refresh control on the row. | | Name | string | Label given to the relayer account. | | Actions | action | **Details** opens the relayer account dialog. | Toolbar controls: keyword search, **Update All Accounts**, **Add Relayer Account**. ## Decentralized Access Key tab Regular User only. | Column | Type | Description | | ---------------- | ------ | -------------------------------------------------------------- | | Date | string | Key creation date. | | Policy Public ID | string | Public identifier of the policy the key was published against. | | Policy Name | string | Policy the key grants access to. | | (unlabeled) | action | Deletes the key. Disabled while the key status is `PUBLISHED`. | The toolbar shows **Generate Key** for local accounts and **Import Key** for remote accounts. ## Credentials tab Split into **Global** and **Per policy** sub-tabs, each a table of stored service credentials, with **Add Credential** in the toolbar. | Column | Type | Description | | ------- | ------ | -------------------------------------------------------------------------------- | | Service | string | External service the credential belongs to. | | Mode | string | How the credential is supplied. | | Updated | string | Last modification date. | | Source | string | Regular User only. Marked `Set by SR` when inherited from the Standard Registry. | | Actions | action | Edit or remove the credential. | Overriding a credential that was set by the Standard Registry asks for a **Confirm Override** before saving. ## Setup wizard Shown instead of the tabs while the account is not yet confirmed. ### Standard Registry | Step | Contents | | ---------------------------- | ------------------------------------------------------------------------------------------------------ | | Hedera Account | `Operator ID` and `Operator Key`. Fireblocks custodial signing can be used instead of an operator key. | | Set Up Your Digital Identity | Generate a new DID document, or supply a custom one with a topic ID and DID document JSON. | | DID Document signing keys | Method and key for each verification method. Shown only for custom DID documents. | | Company Profile Information | VC form driven by the Standard Registry schema. | ### Regular User | Step | Contents | | ------------------------- | ------------------------------------------------------------------------------------------------------------- | | Standard Registries | Registry cards, filterable. One registry must be selected. | | Hedera Account | `Operator ID` and `Operator Key`, or generate a demo account. Fireblocks fields as for the Standard Registry. | | Select Vault | MGS-specific step choosing where the account's secrets are held. | | Digital identity | Local or remote identity location. Remote requires an operator ID, a topic ID, and a DID document. | | DID Document signing keys | Method and key per verification method. Local accounts with a custom DID document only. | | VC Document | VC form driven by the registry's user schema. Shown only when a custom VC document is chosen. | ## Notes * The page renders the setup wizard until the account is confirmed. The tabs appear only afterwards. * **Theme** and **Menu layout** are stored per device, not per account, so they do not follow the user to another browser. * Balances are cached. The Relayer Accounts tab refreshes them per row or in bulk rather than on page load. * Enabling **First Steps** does not currently add a menu item, because MGS ships no First Steps content of its own. ## Related * Reference: [Profile APIs](/technical-information/users/user-operations/profile-apis.md) * Concept: [Automatic Transaction Processing (ATP)](/technical-information/automatic-transaction-processing-atp.md) * Guide: [Two-factor Authentication (2FA) Setup Guide](/technical-information/two-factor-authentication-2fa-setup-guide.md) * Guide: [Transfer of Ownership](/technical-information/transfer-of-ownership.md) * Reference: [Project Account (Relayer Account)](/technical-information/project-account-relayer-account.md) * Concept: [About MGS Vault](/learn/important-concepts/about-mgs-vault.md)