Set eligibility grants

Step 2 of 4 in Bind trust and queries.

Loading example...

Loading example...

Write the full eligibleDomainIds set with the version you read. A domain outside the grant is rejected as a configuration error when the attachment resolves, even though the attachment write itself was accepted. Narrowing does not rewrite attachments that already name the removed domain; check that domain's consumers afterwards. The tenant attachment is never capped by a grant.

Next

Continue with step 3, Attach domains to the verifier and queries.