Introduction
Administrative permissions delegate specific changes to wallet access and lifecycle.- Use when: a signer needs to administer wallet access or perform a specific management operation.
- For: owners, trusted administrators, and guardians.
How it works
- Choose the operation the signer needs to perform.
- Grant its specific permission, scoped to a role or subaccount where supported.
- Use that role to authorize the corresponding transaction.
- Confirm the transaction and refetch the resulting wallet state.
Role and wallet management
ManageAuthoritylets its holder grant access to others; reserve it for trusted administrators.ReplaceAuthoritygives a guardian control over the replacement key for its target role.- Active holds constrain role removal, guardian replacement, and wallet closure.
Subaccount management
Use builders compatible with the wallet’s subaccount version. Reserved wallets
use V2 subaccounts; Classic’s legacy V1 subaccount helpers cannot operate them.
The V2 permission constructors above do not turn those V1 operation helpers
into V2 builders; use the Rust V2 APIs for that flow.
SDK example
A role administrator.- Attach this permission set with Add a role.
- The role can manage access; this action alone does not grant a spending budget.
- For narrower delegation, use the guardian recovery example.

