Struct InstanceAdmin 

pub struct InstanceAdmin<'a> { /* private fields */ }

Instance-admin capability view over a User session.

Obtain via User::admin. See the module docs for the rationale behind the separate type.

Implementations

impl<'a> InstanceAdmin<'a>

pub async fn create_user(&self, new_user: NewUser) -> Result<String>

Create a new user account.

Signs the _users write with this admin’s session key and authors the new user’s database via the regular Database::create wire path. The user-tree first-login bootstrap (root UserKey row, device-key Read grant) is deferred to first login, where the new user is themselves the connection session and can author both writes directly. The result is the same one code path on local and remote instances — no daemon-side RPC and no plaintext password on the wire.

Returns the new user’s UUID (stable internal identifier). Use Instance::login_user to obtain a User session for the new account; materialising it directly here would require the admin’s connection to read the new user’s own tree over the wire, where the session gate (correctly) rejects the admin as a non-member.

Arguments

• new_user - Username and optional password for the user to create. See NewUser.

pub async fn list_users(&self) -> Result<Vec<String>>

List all user IDs.

Reads _users via the admin’s session key, so it works on both local and remote instances.

pub async fn grant_instance_admin(&self, new_admin: &PublicKey) -> Result<()>

Grant instance-admin to another key.

Adds new_admin as Admin(0) on the system databases that gate instance-level admin operations (_users and _databases), with the write signed by this admin’s own key. The first instance admin is created automatically during instance bootstrap; this is how every subsequent admin is promoted.

Idempotent: re-granting an existing admin re-asserts the same Admin(0) entry.

Trait Implementations

impl<'a> Debug for InstanceAdmin<'a>

fn fmt(&self, f: &mut Formatter<'_>) -> Result

Formats the value using the given formatter.