Profile Management

My account · Account settings · Self-service account management

Examples

Sign-in and security panel of a Google account — The "How you sign in to Google" panel: the user manages the password, 2-Step Verification, and recovery methods of their account (Spanish-language interface).

Description

A component that lets an authenticated user manage the essential data and security settings of their own account. The user can change access credentials, update contact information, and manage security aspects such as two-factor authentication or active sessions. Unlike the initial creation of an account, this component operates on an existing account and requires the user to be authenticated or able to verify their identity.

Mandatory capabilities

Allows the authenticated user to change their access credentials (password, email, phone) and contact details
Requires prior authentication to access the modification options
Persists the changes in the user repository

Additional capabilities

Password recovery: a flow accessible without authentication that lets users who lost access reset their password through a link or code sent by email/SMS
2FA setup: lets the user enable or disable two-factor authentication and register their methods (authenticator app, phone number)
Active session management: shows the user's open sessions on different devices and lets the user close them remotely
Additional verification for sensitive changes: asks for identity confirmation (current password, code by email/SMS) before applying critical modifications such as a change of email or password

Boundaries

What it is not

Does not create new accounts — that belongs to Account Creation
Does not cover the administration of other people's accounts; it is specifically about the personal account
Does not include system personalization preferences such as theme, language, or notifications

Information flow

Input

The user's modifications (new password, updated email, 2FA settings), together with identity verification when applicable

→

Output

Data updated in the repository and confirmation to the user, together with a sensitive-change notification when applicable

Variants

Self-service: the user manages their own account without administrator intervention
Assisted: an administrator or support staff makes changes to the user's account (less common, typically for access recovery)

Typical dependencies

Authentication system (Login Form to verify identity before sensitive changes)
User repository where the modified data is updated (Database)
Notification service (Notification System for verification codes and change alerts)
Session manager (to view and close active sessions)

Mapping to the Digital Board

Manual UpdateAlways

Automatic UpdateNo

Data ConceptsAlways

On-Demand OutputsAlways

Automatic OutputsOptional

Autonomous ProcessesNo

Section	Relationship	Notes
Manual Update	Always	Form for editing personal data and credentials. 2FA setup and remote session sign-out, when those capabilities are present.
Automatic Update	No	—
Data Concepts	Always	User (editable attributes). Active Sessions, when that capability is present.
On-Demand Outputs	Always	Display of the current profile data, needed for the user to be able to edit it. List of active sessions, when that capability is present.
Automatic Outputs	Optional	Sensitive-change confirmation email, verification codes, password recovery link, when those capabilities are present.
Autonomous Processes	No	—

Digital Board example

Manual Update

Profile Editing Form

2FA Setup

Remote Session Sign-Out

Data Concepts

User

Session

On-Demand Outputs

Profile data

Active Session List

Automatic Update

—

Autonomous Processes

—

Automatic Outputs

Change Confirmation Email

Verification Code

Examples​

Description​

Mandatory capabilities​

Additional capabilities​

Boundaries​

Information flow​

Variants​

Typical dependencies​

Mapping to the Digital Board​

Digital Board example​