XRP Ledger has activated PermissionDelegationV1_1, allowing businesses to assign specific tasks to separate accounts. The change gives stablecoin issuers, fund administrators and payment firms a way to keep primary treasury credentials away from systems handling routine work.
The new controls are available on mainnet
The XRPL amendment tracker records PermissionDelegationV1_1 becoming active on October 8 at ledger 107,524,865. The feature had been in its validator-approval period in late September; that process has now produced a live account-control tool.
The activation makes the feature available to institutions, although no bank, stablecoin issuer or fund manager has publicly confirmed an implementation. Businesses can now build these permission structures directly on XRPL, with the practical details left to their wallet providers, custodians and internal security teams.
A stablecoin issuer can divide routine work across accounts
A stablecoin issuer may need one team to approve eligible customers and another to process routine transfers. Its primary account can remain under stricter custody, while a compliance account receives authority to approve trust lines after KYC checks and an operations account receives payment authority. Each account holds only the role assigned to it, reducing the effect of a compromised day-to-day key.
How a business could divide wallet duties
Primary account: Creates, changes or revokes delegated roles while its key remains under stronger custody.
Compliance account: Receives authority for a defined customer-approval task.
Operations account: Receives authority to submit an approved category of transaction, such as a payment.
XRPL records each assignment in a Delegate ledger entry. The account receiving the assignment signs with its own credentials and pays the transaction fee from its own balance, while the authorised action takes effect for the primary account. XRPL’s documentation describes the arrangement as role-based access control that can work alongside multi-signing.
Where delegated authority ends
A business can grant authority for particular transaction types or predefined granular functions. Each delegate can hold up to 10 permissions, and the primary account can update or revoke them through another DelegateSet transaction.
Some powers remain with the primary account. A delegate cannot change its cryptographic keys, create further delegations or submit a transaction outside the permissions it has received. Each delegation also creates an on-ledger object that counts toward the primary account’s reserve requirement.
The permission set has no custom payment-policy function. A business cannot use Permission Delegation alone to create rules such as “payments below $10,000 only” or “transfers only to these addresses.” Those controls still belong in wallet software, approval workflows or compliance systems.
Ledger permissions and compliance decisions stay separate
Permission Delegation can determine which account submits an approved XRPL action. KYC checks, sanctions screening, investor records, fund documents and legal responsibility remain with the issuer and its service providers. The amendment divides technical authority; it does not automate the underlying compliance decision.
XRPL’s fund-recordkeeping pilot with Brazil’s CSD BR follows a similar principle. The ledger can support a controlled workflow, while the established market infrastructure remains responsible for the official ownership record. Permission Delegation could give projects using that model more flexibility over which account carries out each authorised ledger action.
One delegated permission carries a published warning
XRPL’s documentation advises businesses against delegating the PaymentBurn granular permission until a separate amendment, fixCleanup3_4_0, becomes active. Until that fix arrives, the documentation says a delegate with PaymentBurn authority could also mint fungible tokens in certain circumstances. Other granular permissions are unaffected.
The warning applies to one permission rather than the whole amendment. It shows why issuers need to review each delegated role before moving routine functions to separate online accounts.
What businesses can do with the new feature
Permission Delegation gives XRPL issuers a way to divide responsibility across wallets without sharing the credentials that control their main account. Its practical value will depend on the policies built around it: which tasks are delegated, how quickly permissions can be revoked and whether wallet providers turn the protocol feature into a usable business-control system.
This article is for informational purposes only and does not constitute legal, financial or investment advice. Businesses should review XRPL’s current technical documentation and their own security policies before using delegated permissions.
Kosta has reported on cryptocurrency markets and blockchain infrastructure since 2020, bringing over six years of hands-on experience in the crypto industry built through daily tracking of markets, trends, and emerging blockchain developments. Specializing in Bitcoin on-chain analysis, institutional ETF flows, and digital asset price action, his work at Coindoo has been cited by other news agencies and consistently covers market developments with a focus on data-driven reporting across Bitcoin, Ethereum, Solana, and XRP.
Over the years, Kosta has contributed to multiple crypto media outlets in different regions, authoring over 6,000 articles across the sector. His reporting spans cryptocurrency markets and the broader fintech industry, tracking not only price action but also the technological and regulatory forces shaping the ecosystem.
To support his analysis, Kosta actively leverages on-chain data and metrics from leading platforms such as Santiment, Glassnode, and CryptoQuant, enabling deeper, evidence-based market insights. He believes in the power of transparency and the data that underpins the blockchain ecosystem.
His academic background in Marketing Management from Denmark further complements his analytical approach, adding a strong understanding of communication strategy and content positioning to his work.
Be the first to comment