Module identity_admin 

Administering the person’s identities and the devices trusted under them. The host keeps the identity store — records, root secrets, the active selector, device fleets — and runs every step, so no application reads a secret or signs with the root key. It is answered under the host’s provider, which a caller names without reading a catalogue, for the person at this device in the workspace their connection was admitted to.

Structs

FleetDevice

One device trusted under an identity, as DEVICES answers it.

Constants

ACTIVATE

Sign new apps in as identity id.

DEVICES

The devices trusted under the workspace’s identity, as FleetDevices.

HOME_PEER_REMOVE

Root-revoke and stop a paired home server (device, service, confirm).

HOME_PEER_RETRY

Deliver the home-server removals that could not reach their server.

LIST

The person’s identities on this device, without secrets.

PROTECT

Move identity id’s key from a plain file into protected storage.

PROVIDER

The provider the host answers identity administration under.

REMOVE

Remove identity id from this device (confirm).

RESOURCE

The resource the steps are actions of.

REVOKE

Root-sign a device’s permanent revocation (device, reason, confirm).

STEPS

Every step, in the order a catalogue lists them.

Functions

target