Enum PrincipalKind 

#[non_exhaustive]
pub enum PrincipalKind {
    User,
    Service,
    System,
    Device,
    Agent,
}

Discriminator for the kind of actor a Principal represents.

Variants (Non-exhaustive)

Non-exhaustive enums could have additional variants added in future. Therefore, when matching against variants of non-exhaustive enums, an extra wildcard arm must be added to account for any future variants.

User

Human or end-user identity (id is a UUID string).

Service

Autonomous service-to-service identity (id is a service name).

System

Platform-level system actor (id is a static name, may be outside any org).

Device

Hardware-bound identity for IoT, edge nodes, or TPM/Secure-Enclave-backed devices (id is a UUID string, typically derived at provisioning). Distinct from Service because identity is pinned to physical hardware, not to a deployed software service.

Agent

Autonomous AI / automation principal with constrained scope (id is a stable agent name, e.g. "ops.triage-agent"). Distinct from Service because credential policy treats agents differently — typically shorter credential TTLs and smaller default scope.

Trait Implementations

impl Clone for PrincipalKind

fn clone(&self) -> PrincipalKind

Returns a duplicate of the value.

fn clone_from(&mut self, source: &Self)

Performs copy-assignment from source.

impl Copy for PrincipalKind

impl Debug for PrincipalKind

fn fmt(&self, f: &mut Formatter<'_>) -> Result

Formats the value using the given formatter.

impl<'de> Deserialize<'de> for PrincipalKind

fn deserialize<__D>(__deserializer: __D) -> Result<Self, __D::Error>

where __D: Deserializer<'de>,

Deserialize this value from the given Serde deserializer.

impl Eq for PrincipalKind

impl Hash for PrincipalKind

fn hash<__H: Hasher>(&self, state: &mut __H)

Feeds this value into the given Hasher.

fn hash_slice<H>(data: &[Self], state: &mut H)

where H: Hasher, Self: Sized,

Feeds a slice of this type into the given Hasher.

impl PartialEq for PrincipalKind

fn eq(&self, other: &PrincipalKind) -> bool

Tests for self and other values to be equal, and is used by ==.

fn ne(&self, other: &Rhs) -> bool

Tests for !=. The default implementation is almost always sufficient, and should not be overridden without very good reason.

impl Serialize for PrincipalKind

fn serialize<__S>(&self, __serializer: __S) -> Result<__S::Ok, __S::Error>

where __S: Serializer,

Serialize this value into the given Serde serializer.

impl StructuralPartialEq for PrincipalKind