Module admin 

Instance-admin capability view.

InstanceAdmin is the gateway for operations gated by Admin on the _users / _databases system databases — creating accounts, listing accounts, promoting other admins.

It is obtained via AccountSession::admin, which only constructs it when the account actually holds instance-admin. Because the permission is checked at construction, the operations here perform no further check of their own, and the privilege boundary is explicit at the call site:

let admin = account.admin().await?;          // Err if not an instance admin
admin.create_account(NewAccount::passwordless("alice")).await?;

Promotion signs system Auth with the account’s session key. Native login registration/listing use instance-admin-gated RPC on connected instances; passwords and plaintext signing keys remain client-side.

Structs

InstanceAdmin

Instance-admin capability view over an AccountSession session.