# This doesn't take account validation into consideration at all. It probably has to be allowed to replace an unvalidated account.
createAccount(ident username, string lastName, string firstName, string email, string password) {
  assume not exists //accounts/account[username];
 
  insert //accounts <account username=[username] lastName=[lastName] firstName=[firstName] email=[email] password=[password] />
} # roles: admin