maxsuite Diagrams

Profile and sign-in

Profile and sign-in

The Account screen is about you: your name and status, your teams, your email, your password, two-factor sign-in, and the API keys you make. Open it from the account menu (your initials, top right) → Account.

Your profile, email, password and two-factor settings need no permission: everyone can change their own. The API keys part needs api-keys:manage.

What you see

  • You: your Name, and a Status (one emoji and a line about it, such as "Away until Thursday"). Your Teams are listed too. Teams are set in People & Access.
  • Email: the address you sign in with.
  • Password: change your password.
  • Two-factor: whether a code from your phone is needed to sign in.
  • API keys: the keys you have made, and the form to make one.
  • Connect an MCP client: make a key and copy ready-made settings for Claude Code, Codex, Cursor or OpenCode.

Sign in

  1. Go to your MaxSuite's address. You land on Welcome back.
  2. Type your username or email address, and your password, then press Sign in.
  3. If two-factor is on, the next screen asks for the six-digit Authentication code from your authenticator app. Type it and press Sign in.

There is no sign-up form. An administrator creates your account. If you cannot get in, ask them. After too many wrong tries your account is locked for a while. Someone holding users:manage can clear the lock under Admin → People → Sign-in locks.

If MaxSuite is restarting or you are offline, the sign-in screen says so. Try again in a minute.

Belong to more than one organisation

Open the account menu and choose to add an organisation. Sign in there with that organisation's own email and password. You stay signed in to the first one, and switch between them from your account menu.

A new account, or a person whose password was reset, gets a one-time link. It opens Choose a password.

  1. Type a New password of at least twelve characters.
  2. Type it again under Same again.
  3. Press the button. You see Password set, and can sign in.

The link works once. Opened without the link, the page says "No link". Ask whoever set up your account for a new one.

Change your name or status

  1. Under You, edit Name, the Status emoji, or the line beside it. Empty the status and save to clear it.
  2. Press Save.

Your name is what others see in every organisation you belong to.

Change your email

  1. Under Email, type the New email.
  2. Type Your password. It is asked for even though you are signed in.
  3. Save. Sign in with the new address from now on, in every organisation you belong to.

Change your password

  1. Under Password, type your Current password.
  2. Type the new one twice. It needs at least twelve characters.
  3. Press Change password.

Other sessions keep working until they expire.

Turn two-factor sign-in on or off

  1. Under Two-factor, press Set up.
  2. Scan the QR code with an authenticator app, or type the secret shown under it.
  3. Type the six-digit code and turn it on.

To turn it off, type your Current password and a current code. Asking for both means someone using a session you left open cannot switch it off.

Sign out

Choose Sign out in the account menu. This ends your session on the server, not just in this browser. If you signed in to other apps through MaxSuite, they are told to sign you out too. See MaxIAM: sign-in for other apps.

Make an API key

The form asks for:

  • Name: so you can tell keys apart, for example "Claude Code on my laptop".
  • Expires in days: it cannot be changed later.
  • Read-only: ticked, the key can only read, whatever it holds.
  • Tool listing: show an MCP client every tool, or only four that search for and call the rest.
  • Acts as you: ticked, the key sees your own rows, within its permissions. Leave it unticked for anything shared. It cannot be changed later.
  • What it may do: permissions. Only the ones you hold are offered.
  • Modules it may reach: a second limit on top of the permissions.

The key is shown once. Copy it then. See API keys and MCP access.

Connect an outside app by signing in

When an app such as Claude asks to connect, you land on a page that says the app wants to connect. It names the app and who published it.

  • The app acts as you, with your permissions. Anything you cannot do, it cannot do.
  • Choose Search only (four tools that find and run the rest; best for a large workspace) or All tools. You can change this later under Connections → Connected apps.
  • Approve or decline. You go back to the app.

If outside apps are not allowed here, the page says Not connected. An administrator turns them on under Connected apps. If you lack the permission to use MCP, the page warns you that the app would be refused.

Who can do what

PartPermission
Your profile, email, password, two-factor, sign outnone: everyone, for themselves
API keys: list, make, edit, revokeapi-keys:manage
Clearing someone's sign-in lockusers:manage

For agents

An agent cannot change your profile, email, password or two-factor. core.listSignInLocks lists who is locked out. core.clearSignInLock lifts a lock but refuses every caller except a person signed in as themselves.