Customize the account page

This guide explains how to configure the account items of an organization. Account items are the fields on the account page and the user edit page of every member of the organization. For each field, you decide whether it is visible, who can view it, and who can edit it.

---

Learning outcomes

• Show or hide fields of the account page.
• Restrict who can view and edit a field.
• Group fields into tabs and choose the layout of the tabs.

What you need

• Administrator access to the organization in the Casdoor admin console

---

About account items

Each account item has the following settings:

Column	Values	Descrição
Nome	A field from the list of account items	The field
Visível	On or off	Whether the field appears on the account page
View rule	Public, Self, Admin	Who can see the value of the field
Modify rule	Self, Admin, Immutable	Who can change the value of the field
Aba	Text	Tab under which the field appears on the user edit page

The rules have the following meaning:

Rule	Who can view or change the field
Public	View rule only. Everyone can see the field of any user
Self	Each user, for their own account only. Casdoor matches by user ID, or by organization and username if the ID is missing
Admin	Administrators of the organization only
Immutable	Modify rule only. Nobody can change the field on the account page

nota

View rules and modify rules apply to single fields of a user profile. They are separate from permissions, which control access to applications and resources.

Configure the account items

1. In the Casdoor admin console, go to User Management > Organizations and open the organization.

2. Scroll to Account items.

   

3. To show or hide a field, switch Visible.

   

4. To restrict a field, select a View rule and a Modify rule.

   

5. Save the organization.

Common patterns

Campo	View Rule	Modify Rule	Use Case
Name	Public	Self	Everyone can see names, but users can only change their own
Email	Self	Self	Users can only see and change their own email
Phone	Admin	Admin	Only admins can see and change phone numbers (for privacy)
Display name	Public	Self	Public profile name visible to all
Password	Self	Self	Users can only change their own password

dica

Use the Admin rule for sensitive fields that only administrators should manage, such as phone numbers, addresses, and internal identifiers.

Group fields into tabs

Items with the same Tab value appear together under one tab of the user edit page. Items without a tab value appear first, outside the tabs.

For example, to create a Contact tab with the email address, the phone number, and the location:

1. Open the organization and scroll to Account items.
2. Set Tab to Contact in the rows Email, Phone, and Location.
3. Save the organization. The user edit page now has a Contact tab with the three fields.

Choose the tab layout

Account menu on the organization edit page sets how the tabs are shown:

Option	Layout
Horizontal (default)	Tabs across the top of the page
Vertical	A menu on the left side of the page. Use it for organizations with many tabs

List of account items

Field	Descrição
Organização	The organization this user belongs to.
ID	The user's globally unique identifier (UUID).
Nome	The user's unique login username within the organization.
Nome de exibição	The name shown publicly on the user's profile.
Nome	The user's given name.
Sobrenome	The user's family name.
Avatar	The user's profile picture.
Tipo de usuário	The category of the user account (e.g. normal user, service account).
Senha	The user's login password.
Email	The user's email address, used for login and notifications.
Telefone	The user's phone number, used for login and SMS verification.
Código do país	The phone country/calling code (e.g. +1 for the US), used together with Phone.
País/Região	The user's country or region.
Localização	The user's city or address.
Afiliação	The user's company, school, or other organizational affiliation.
Título	The user's job title or position.
Tipo de cartão de identidade	The type of government-issued identity document (e.g. passport, national ID card, driver's license).
Cartão de identidade	The document number of the user's identity document.
Informações do cartão de identidade	Additional identity document details (e.g. issue date, expiry). Only visible to the user themselves.
Nome real	The user's verified legal name. Locked and cannot be changed after identity verification is completed.
Verificação de ID	Controls visibility of and access to the Verify identity button on the profile page.
Página inicial	The URL of the user's personal website or online profile.
Bio	A short biography or personal description.
Tag	One or more custom labels attached to the user, used for filtering or grouping.
Aplicação de inscrição	The application the user originally signed up through.
Tipo de registro	The method used to register the account (e.g. email, phone, OAuth).
Origem do registro	The channel or provider through which the user registered (e.g. Google, GitHub, invite link).
Funções	The roles assigned to this user, which determine access within Casdoor.
Permissões	The permissions explicitly granted to this user.
Dica: grupos	The user groups this user belongs to.
Logins de terceiros	Linked third-party OAuth accounts (e.g. Google, GitHub, WeChat) used for social login.
Propriedades	Custom key-value pairs for storing additional application-specific data about the user.
Saldo	The user's account balance, used for built-in payment or credit features.
Saldo de créditos	Minimum balance floor for the user's account. Must be ≤ 0. Set to 0 (default) to prevent the balance from going negative. Set to a negative value (e.g. -50) to allow the balance to drop as low as that amount before transactions are blocked.
Moeda do saldo	The currency unit for the user's balance (e.g. USD, CNY).
Carrinho	Items added to the user's shopping cart (for e-commerce integrations).
Pontuação	A point score assigned to the user, typically by application logic.
Pontos de karma	A reputation score reflecting the user's activity or community standing.
Classificação	The user's rank among all users, derived from score or other metrics.
Idioma	The user's preferred display language for the Casdoor UI.
É admin	Whether the user has organization administrator privileges.
É proibido	Whether the user account is banned; forbidden users cannot log in.
É excluído	Whether the user account has been soft-deleted (marked as deleted but retained in the database).
Autenticação multifator	The user's MFA settings and enrolled second-factor methods (e.g. TOTP app, SMS).
Dica: itens de MFA	The list of individual MFA methods enrolled by the user.
Credenciais WebAuthn	Registered passkeys or hardware security keys (WebAuthn/FIDO2) for passwordless login.
Última alteração de senha	Timestamp of the user's most recent password change. Admin-only.
Contas gerenciadas	Sub-accounts or delegated accounts that this user can manage on behalf of others.
Autenticação Face ID	Enrolled face recognition data used for biometric login.
Contas MFA	External accounts linked specifically for multi-factor authentication purposes.
Necessário atualizar senha	Whether the user is required to change their password at next login. Admin-only. When set, the user is redirected to their Account page after sign-in and cannot navigate elsewhere until the password is updated.
Lista branca de IP	IP addresses or CIDR ranges from which this user is allowed to sign in. Admin-only.

See also

• Organizations
• Users
• MFA items