acl:grant

Grant a role on an AccessControl contract (string roles, hashed with keccak256) or an AccessManager (numeric role ids).

Syntax

acl:grant <role> <on> <target> <to> <account>

Arguments

Name	Type	Description
role	number | string	Role name (e.g. MINTER_ROLE), bytes32 value, or AccessManager role id
on	command	Keyword on
target	address	AccessControl contract or AccessManager address
to	command	Keyword to
account	address	Account to grant to

Options

Name	Type	Description
--delay	number	Execution delay for the grantee, in time units (e.g. 1d; AccessManager role ids only)

Examples

load acl

set $token 0x9C58BAcC331c9aa871AFD802DB6379a98e80CEdb
set $manager 0xc0dbDcA66a0636236fAbe1B3C16B1bD4C84bB1E1

# AccessControl: role names are hashed with keccak256
acl:grant MINTER_ROLE on $token to @me
acl:grant DEFAULT_ADMIN_ROLE on $token to 0x4F2083f5fBede34C2714aFfb3105539775f7FE64

# AccessManager: numeric role ids, optionally with an execution delay
acl:grant 1 on $manager to @me
acl:grant 42 on $manager to 0x4F2083f5fBede34C2714aFfb3105539775f7FE64 --delay 1d

Notes

• String roles target AccessControl grantRole(bytes32,address): the name is hashed with keccak256 (so MINTER_ROLE becomes @id(MINTER_ROLE)), DEFAULT_ADMIN_ROLE maps to 0x00…00, and a 0x… bytes32 value passes through untouched.
• Numeric roles target AccessManager grantRole(uint64,address,uint32). ADMIN_ROLE and PUBLIC_ROLE are accepted as aliases for 0 and 2^64-1. --delay sets the grantee's execution delay and is only valid here.
• The sender must hold the role's admin role.

See Also

• acl:revoke — remove a role
• acl:renounce — give up one of your own roles
• @acl:hasRole — check membership
• @acl:roleAdmin — find the admin role