# Profile

Use these operations to manage user profiles.
A profile represents the person that is signed in to Rebilly.

## Start permissions emulation

 - [POST /permissions-emulation](https://www.rebilly.com/static/_spec/catalog/all-3.0/profile/postpermissionsemulation.md): Starts permissions emulation.

Emulation during emulation is not supported. If request sent during an ongoing emulation then 403 is sent in response.

Escalation is not supported.

## Stop permissions emulation

 - [DELETE /permissions-emulation](https://www.rebilly.com/static/_spec/catalog/all-3.0/profile/deletepermissionsemulation.md): Stops permissions emulation.

Session permissions are restored to the state before emulation began.
If emulations have not started then  is sent in response.

## Retrieve user's own profile

 - [GET /profile](https://www.rebilly.com/static/_spec/catalog/all-3.0/profile/getprofile.md): Retrieves the user's own profile as requested by the user.

## Update a user profile

 - [PUT /profile](https://www.rebilly.com/static/_spec/catalog/all-3.0/profile/putprofile.md): Updates user profile.

## Retrieve user MFA status

 - [GET /profile/mfa](https://www.rebilly.com/static/_spec/catalog/all-3.0/profile/getprofilemfa.md): Retrieves Multi-Factor Authentication (MFA) status of a user.

## Update user MFA

 - [POST /profile/mfa](https://www.rebilly.com/static/_spec/catalog/all-3.0/profile/postprofilemfa.md): Updates the Multi-Factor Authentication (MFA) information of a user.

The generated link with an   link must be followed to verify the existing MFA or enroll new MFA.

## Delete user MFA

 - [DELETE /profile/mfa](https://www.rebilly.com/static/_spec/catalog/all-3.0/profile/deleteprofilemfa.md): Deletes the Multi-Factor Authentication (MFA) information of a user.

To complete this operation, the  value must be no more than 10 minutes before this request.