Profile
Profile holds the settings that belong to you rather than to the organization: how you appear to teammates, how you sign in, what you get notified about, the personal tokens you use to call the platform API as yourself, and how the console looks. Open it from your avatar in the top bar.
Organization-wide equivalents live elsewhere: Access for who else can sign in, and Security for org-level authentication and org API keys.
The page has four tabs: Account, Notification, API Keys, and Appearance.
Account
Personal details is your full name: how you appear to teammates in activity feeds, audit logs, and subscription metadata.
Alongside it, your Role and Teams are shown read-only. Both are managed org-wide under Access, not here.
Sign-in & security covers:
- Change email: your email is both your sign-in username and where platform notifications go. Confirm with your current password.
- Change password: takes effect immediately across all sessions.
- Active sessions: every signed-in device, with the option to sign out any session you don't recognize.
Info
When the organization has SSO enabled under Security, sign-in is delegated to your identity provider and the email and password controls no longer apply to you.
Danger zone holds account deletion, confirmed by typing your own email address. Deletion is permanent.
Notification
Choose which events reach you, alongside the in-app Inbox.
Event notifications
| Event | Fires when |
|---|---|
| New subscriber on your API Product | A consumer's subscription is approved against a product you own. |
| Quota breach on your subscription | An Application you own passes 90% of a plan's quota. |
| Policy violation | Any violation on a Gateway, cluster, or product you own or administer. |
| Gateway down or version drift | A Gateway you manage loses its heartbeat or falls behind the control-plane version. |
| New version published on a subscribed product | A product you subscribe to releases a new version, with its compatibility summary. |
| Team membership changes | Someone joins or leaves a team you belong to. |
Email digest
A rolled-up email summary of activity on the surfaces you own or follow: Off, Daily at 9:00 local time, or Weekly on Monday.
API Keys
Personal tokens call the Zilla Console API as you, carrying your own permissions, for scripts, notebooks, and local tooling. They're distinct from the organization API keys used by CI and automation, and from the per-subscription credentials under Applications.
To create one, give it a name and an optional description, then choose an expiry: 24 hours, 30 days, 90 days, or Never. The token value is shown once at creation, so copy it before closing the dialog.
Warning
A non-expiring token is a standing credential tied to your account and your permissions. Prefer a bounded expiry, and revoke any token you no longer use.
Appearance
Theme selects Light, Dark, or System, which follows your operating system's appearance setting.