Skip to main content

Policy examples

Access control​

Allow a specific user to create private keys​

{
  "policyName": "Allow user <USER_ID> to create private keys",
  "effect": "EFFECT_ALLOW",
  "consensus": "approvers.any(user, user.id == '<USER_ID>')",
  "condition": "activity.resource == 'PRIVATE_KEY' && activity.action == 'CREATE'"
}

Allow users with a specific tag to create users​

{
  "policyName": "Allow user_tag <USER_TAG_ID> to create private users",
  "effect": "EFFECT_ALLOW",
  "consensus": "approvers.any(user, user.tags.contains('<USER_TAG_ID>'))",
  "condition": "activity.resource == 'USER' && activity.action == 'CREATE'"
}

Require two users with a specific tag to add policies​

{
  "policyName": "Require two users with user_tag <USER_TAG_ID> to create policies",
  "effect": "EFFECT_ALLOW",
  "consensus": "approvers.filter(user, user.tags.contains('<USER_TAG_ID>')).count() >= 2",
  "condition": "activity.resource == 'POLICY' && activity.action == 'CREATE'"
}

Deny all delete actions for users with a specific tag​

{
    "policyName": "Only user_tag <USER_TAG_ID> can take actions",
    "effect": "EFFECT_DENY",
    "consensus": "approvers.any(user, user.tags.contains('<USER_TAG_ID>'))",
    "condition": "activity.action == 'DELETE'"
}

Signing control​

Allow a specific user to sign transactions with a specific private key​

{
    "policyName": "Allow <USER_ID> to sign transactions with <PRIVATE_KEY_ID>",
    "effect": "EFFECT_ALLOW",
    "consensus": "approvers.any(user, user.id == '<USER_ID>')",
    "condition": "private_key.id == '<PRIVATE_KEY_ID>'"
}

Allow ERC-20 transfers for a specific token smart contract​

{
  "policyName": "Enable ERC-20 transfers for <CONTRACT_ADDRESS>",
  "effect": "EFFECT_ALLOW",
  "condition": "eth.tx.to == '<CONTRACT_ADDRESS>' && eth.tx.data[0..10] == '0xa9059cbb'"
}

Allow anyone to sign transactions for testnet (Sepolia)​

{
  "policyName": "Allow signing ethereum sepolia transactions",
  "effect": "EFFECT_ALLOW",
  "condition": "eth.tx.chain_id == 11155111"
}