Skip to main content

Accounts and Permissions

Overview​

An account identifies a participant in an Antelope blockchain. A participant can be an individual or a group depending on the assigned permissions within the account. Accounts also represent the smart contract actors that push and receive actions to and from other accounts on the blockchain. Actions are always contained within transactions. A transaction can be one or more atomic actions.

Permissions associated with an account are used to authorize actions and transactions to other accounts. Each permission is linked to an authority table which contains a threshold that must be reached in order to allow the action associated with the given permission to be authorized for execution. The following diagram illustrates the relationship between accounts, permissions, and authorities.

AccountsPerms

By default, when Alice's account was generated it initialized 2 native permissions, also known as addresses - specifically the Owner and Active Keys.

  • The owner is then able to grant permissions to family, friends, and lawyer with weights applied as seen in the threshold chart.

Antelope Accounts features​

  • Simple 12 characters long (human readable)
  • Keychain, can link multiple key pairs as authorizations.
  • Can store multiple key pairs in a single account.

Use Cases​

  • Can be a contract account, multisig wallet, or single user account(EOA).

MultiSig Accounts:​

Designed for security and consensus amongst a group of stakeholders in a business or for an individual ramping up security. It is an account that has enabled permissions to multiple entities with keys within that account and requires most of the keys to sign the transaction to execute.

Creating an Account​

There are various ways to create an Antelope account. Some methods are relatively easy whereas other methods can be more secure and complicated. The 3 methods covered in this section are the automated Telos Account generator on the browser, premium account name bidding, and the Cleos generate account command for local dev purposes.

Telos Account Generator​

The easiest way to create an account via Telos Account Generator

  • Enter a preferred account name and the Telos super account will automatically generate an account with key pairs linked to the new account.

Premium Account Name Bidding​

Premium names will be available in the form of “suffixes”. This is essentially the same idea as the Top Level Domain (TLD) used for website addresses:

  • com
  • net
  • io
  • tlos
  • mydapp

The owner of these premium names would then be able to generate new accounts that can be shorter (but not longer) than the 12 character limit, and may include a “dot”. The owner of "mydapp" could create "user1.mydapp", "iam.mydapp", whatever they wish. These accounts are unable to be deleted and may be given away at the discretion (or for the correct price) of the owner of the premium name.

Things to know about the bidding process:

  • You can bid any amount for a new name that’s not been bid on
  • New bids on the same name must be at least a 10% higher than the previous bid
  • To win a name bid, you must hold the highest bid of all names and hold it for an uncontested 24 hours. So only one account name per 24 hour period can be won
  • If you win the bid, you receive the right to create an account with the given account name, you don't receive a created account.
  • Anyone who is outbid will be refunded

Bid on premium account name here via EOS Authority.

CLEOS Account Command​

Generate a new account using the Antelope.io for creator account and provide a name for the account the Owner Key after all other parameters are met.

cleos create account [OPTIONS] creator name OwnerKey [ActiveKey]

Actions and Transactions​

Besides identifying participants in an Antelope.io blockchain, actions and transactions are other reasons for accounts to exist. An action requires one or more actors to push or send the action and a receiver account to whom the action is directed. A receiver account is also needed when leaving proof, in an action receipt, that the action was pushed to the intended recipient.

In contrast, transactions are agnostic to accounts eventhough there is an indirect link to them through their associated keys. Transactions are signed using one or more signing keys belonging to one or more actors involved in the actions that form the transaction. This can be the receiving account itself or other authorized actors specified on the authority table from the receiving account's permission.

Permissions​

Permissions control what Antelope.io accounts can do and how actions are authorized. This is accomplished through a flexible permission structure that links each account to a list of hierarchical named permissions, and each named permission to an authority table (see permission schema below).

PermissionSchema