Skip to main content

Introduction

Administrative permissions delegate specific changes to wallet access and lifecycle.
  • Use when: a signer needs to administer wallet access or perform a specific management operation.
  • For: owners, trusted administrators, and guardians.

How it works

  1. Choose the operation the signer needs to perform.
  2. Grant its specific permission, scoped to a role or subaccount where supported.
  3. Use that role to authorize the corresponding transaction.
  4. Confirm the transaction and refetch the resulting wallet state.

Role and wallet management

  • ManageAuthority lets its holder grant access to others; reserve it for trusted administrators.
  • ReplaceAuthority gives a guardian control over the replacement key for its target role.
  • Active holds constrain role removal, guardian replacement, and wallet closure.

Subaccount management

Use builders compatible with the wallet’s subaccount version. Reserved wallets use V2 subaccounts; Classic’s legacy V1 subaccount helpers cannot operate them. The V2 permission constructors above do not turn those V1 operation helpers into V2 builders; use the Rust V2 APIs for that flow.

SDK example

A role administrator.
  • Attach this permission set with Add a role.
  • The role can manage access; this action alone does not grant a spending budget.
  • For narrower delegation, use the guardian recovery example.