XRPL delegated account permissions: what changed and how it works
At 21:29:50 UTC on October 8, 2026, ledger 107,524,865 enabled PermissionDelegationV1_1. An account can now authorize another account to perform selected actions without handing over its master keys, allowing an issuer to separate payment, trust-line, and customer-authorization duties. DefiPrime
How it works
The account owner submits a DelegateSet transaction naming the delegate and listing up to 10 permissions. The delegate signs its permitted transactions with its own keys and pays their fees. The owner can update the permission list, revoking any permissions omitted, or submit an empty list to remove an existing delegation. Each owner-delegate relationship creates a Delegate ledger entry and uses one owner reserve, regardless of the number of permissions. DelegateSet reference · Delegate ledger entry reference
Operational boundary
The official reference recommends not delegating PaymentBurn until fixCleanup3_4_0 is enabled: before that fix, the permission can, in certain circumstances, also allow minting issued trust-line tokens or MPTs. The source reports that the fix was still open for voting on October 9, 2026, so the warning remained in effect then. DelegateSet reference · DefiPrime
DefiPrime report « · » CoinDesk coverage « · » DelegateSet reference « · » Delegate ledger entry reference