AppAgent Admins

Intro

Admin accounts are regular blockchain addresses with elevated privileges and responsibilities that allow them to perform administrative tasks such as mint/burn/transfer AppAgent' tokens. These are regular addresses (not keyless addresses) that are used by engineers or apps.

Admins can be added and deleted by the owner of an AppAgent. Every AppAgent can have up to 16 Admins.

Dispatching clearing transactions

Clearing transactions are used to perform all routine tasks such as mint / burn / configure / transfer tokens. AppAgent Admins, along with AppAgent Owner, are able to dispatch Clearing transactions.

Default permissions of an admin allow to perform any action within the Clearing transaction. You can restrict actions allowed to a particular Admin to some subset.

Admins need to have some balance of TRAIT tokens in order to dispatch Clearing transactions. Dispatching clearing transactions normally is covered by AppAgent subscription and does not incur blockchain fees for Admin address. But in case of incorrectly built Clearing transaction the Admin will be charged a blockchain fee. This drains the balance of the Admin and stops the dispatching of new misconfigured transactions, which could be harmful to the AppAgent.

Read more about Subscriptions

Read more about Clearing Transactions

Permissions

While every AppAgent has a default permission level, the access level of each admin can be individually configured.

In a more practical sense, this allows you as an AppAgent owner to create admin accounts with targeted responsibilities and concerns. You can have one admin that can spend funds from cold storage address and another responsible for dispatching transactions.

Dispatch filters for Clearing transactions

Admins' ability to perform specific actions within a Clearing transaction can be restricted by setting dispatch filters. Dispatch filters are lists of functions that could be called by an Action within a Clearing transaction.

If no dispatch filter is set for an admin, they can call all functions. The recommended practice is to narrow scope of the permissions of each admin account.

Spending from Cold Wallets and Hot Wallet

TRAIT blockchain provides every AppAgent with Cold Wallet and Hot Wallet.

By default every Admin can spend tokens or perform any other actions from the AppAgent' Hot Wallet. This can be disabled in configuration of the Admin.

By default Admins are not allowed to spend from AppAgent' Cold Wallets. AppAgent Owner needs to explicitly provide permissions to the Admin to spend tokens from Cold Wallet.