2. Administration

Users

Role	Description
PROXY_ADMIN	Responsible for upgrades operations (pause/unpause/add new logic or fix contract data/freeze contract upgrades)
SYS_ADMIN	Responsible for Operation administration: set commissions, add / remove Operator(s), approve / remove Operator validation keys before they are funded
OPERATOR (can be multiple)	Add / Remove validation key deposit data

PROXY_ADMIN

Kiln recommends that the PROXY_ADMIN is setup as a multi-sig between multiple parties within the partner or including trusted third parties.

Contract	Action	Description	Regularity
StakingContract	pause	pause Staking Contract (no non-view functions can be called)	Exception
StakingContract	unpause	unpause Staking Contract	Exception
StakingContract	changeAdmin	change PROXY_ADMIN address	Exception
StakingContract	upgradeTo	change implementation address	Exception
StakingContract	upgradeToAndCall	change implentation address and performs an additional setup call	Exception

SYS_ADMIN

Kiln recommends that the SYS_ADMIN is setup as a multi-sig between multiple parties within the partner or including trusted third parties.

Contract	Action	Description	Regularity
StakingContract	setWithdrawerCustomizationEnabled	Enable or disable the ability for users to modify their withdrawer address	Exception
StakingContract	setTreasury	Set new treasury recipient address	Rare
StakingContract	transferOwnership	Set new SYS_ADMIN	Exception
StakingContract	addOperator	Register Operator address and commission recipient address	At Setup time
StakingContract	setOperatorLimit	Set Operator number of keys to be exposed to the end users for deposit	Often
StakingContract	deactivateOperator	Deactivate operator, its commission recipient and key limit	Exception
StakingContract	activateOperator	Activate operator, without changing the 0 limit	Exception
StakingContract	setOperatorFee	Change the operator fee	Rare
StakingContract	setGlobalFee	Change the Global fee	Rare
StakingContract	setDepositsStopped	Pause or Resume the deposit feature	Exception
StakingContract	batchWithdrawCLFee	Withdraw CL Recipients of multiple staked positions	Rare
StakingContract	batchWithdrawELFee	Withdraw EL Recipients of multiple staked positions	Rare
StakingContract	withdrawELFee	Withdraw EL Recipient of a staked position	Rare
StakingContract	withdrawCLFee	Withdraw CL Recipient of a staked position	Rare

OPERATOR

Kiln recommends that the OPERATOR is setup as a hot wallet for use in scripts and automation.

It's rights are limited to changing the validators list, changes must then be approved by the admin.

The address can be changed by OPERATOR_FEE_RECIPIENT

Contract	Action	Description	Regularity
StakingContract	addValidators	Add new validator deposit data to be approved by the SYS_ADMIN	1/mth (depends on the deposit volume)
StakingContract	removeValidators	Remove validators that are not funded	Exception

OPERATOR_FEE_RECIPIENT

Kiln recommends that the OPERATOR_FEE_RECIPIENT is setup as a multi-sig between multiple parties inside the Operator entity, this is where the operator fee will flow to.

Contract	Action	Description	Regularity
StakingContract	setOperatorAddresses	Change Operator Address and/or Operator Commission recipient address	Exception