Knowledgebase
Edit Reseller Nameservers and Privileges Print this Article
Overview:
This interface allows you to modify reseller permissions. You can set cPanel account creation limits and quotas for resellers. You can also select which privileges a particular reseller can access. You control these privileges with Access Control Lists (ACLs). For example, you can perform the following actions:
- Limit a reseller’s ability to create cPanel accounts.
- Assign nameserver IP addresses for cPanel accounts that the reseller creates. This setting also adds A entries for those addresses.
To modify limits and privileges, select the reseller that you wish to modify, then click Submit.
If only one reseller exists, the interface automatically selects that reseller. Alternatively, use the Reseller Actions for menu in WHM’s Reseller Center interface (WHM >> Home >> Resellers >> Reseller Center).
Account Creation Limits
This interface uses three methods to limit a reseller’s ability to create cPanel accounts. A server that contains many cPanel accounts can deplete resources and cause it to run slowly. Use any of the following methods to prevent resource depletion:
Total number of accounts
To limit the total number of cPanel accounts that a reseller can create, perform the following steps:
- Select the Limit the total number of accounts reseller can create checkbox.
- Enter the maximum number of cPanel accounts to allow the reseller to create in the text box.
Limit by resource usage
- Resource limits only function on cPanel accounts that you assign to packages. If a cPanel account does not use a hosting package, resource limits do not apply. To limit resellers in this way, you must require them to assign all of their cPanel accounts to a package. To do this, deselect all of the checkboxes under the Super Privileges heading in the reseller’s feature list.
- If you select this setting, you cannot select the following privileges:
- Create Packages with Unlimited Disk Usage.
- Create Packages with Unlimited Bandwidth.
To limit cPanel accounts by resource usage, select the Limit accounts that reseller can create by Resource Usage checkbox. This setting allows you to specify a maximum amount of disk space, bandwidth, or both, in megabytes (MB).
To limit a reseller account by resource usage, perform the following steps:
- Select the Limit accounts that reseller can create by Resource Usage checkbox. The Resource Usage Limits settings will appear.
- Enter the quotas, in megabytes, in the Maximum Allowed Disk Space and Maximum Allowed Bandwidth text boxes. You cannot enter an unlimited value in these text boxes.
Note:
You must provide values in both of these text boxes. However, if you want to limit a single setting, enter a very large numerical value in the opposite setting’s text box. For example, enter a
99999999
value in the Maximum Allowed Disk Space text box. Then, enter a1024
value in the Maximum Allowed Bandwidth text box to limit the bandwidth to1024
MB. - Select the Allow Overselling checkbox next to each resource that you wish to allow your reseller to oversell.
Note:
Overselling combines the actual disk space used by a reseller’s cPanel accounts. If you do not enable overselling, resellers can only assign quotas that add up to the amount that you set.
Specify packages
Packages allow your reseller to specify settings for cPanel accounts. For example, a reseller can limit a cPanel account’s amount of monthly bandwidth or the number of subdomains. For more information about packages, read our Add a Package documentation.
- To reset a package for a reseller, read our Reset Resellers documentation.
- If you choose to limit a reseller by package, you cannot enter an unlimited value.
- Some packages do not comply with resource limits.
- You cannot apply a resource limit to cPanel accounts with an unlimited bandwidth or disk space quota.
To specify which packages a reseller can use to create cPanel accounts, perform the following steps:
- Select Specify which packages reseller can use for account creation. The Package Limits settings will appear.
- Select the Creation Allowed checkbox for each package that you wish to allow the reseller to use.
Important:
You must select the desired Creation Allowed checkboxes to allow the reseller to use that package.
- To set a maximum number of cPanel accounts per package, select Limit the number of accounts that a reseller can create per package. Enter the number of packages that you wish to allow this reseller to sell for each package in the Number Allowed text box.
Feature Limits (ACL Lists)
You can use ACLs to manage your resellers’ privilege to access certain WHM features. For example, you can grant or deny the privilege to use WHM’s List Accounts interface (WHM >> Home >> Account Information >> List Accounts). By default, the system assigns the Initial Privileges settings to newly-created reseller accounts.
- You must correctly configure your Super Privileges and Root Access privileges. Carefully read the warnings for each ACL before you grant a reseller a particular ACL. Many of the Super Privileges ACLs allow resellers to circumvent the limits that you impose.
- Granting
root
-level access to a reseller will grant the same privileges as theroot
user.
You can also edit ACL settings with one of the following methods:
- Set the privileges with the WHM API 1
setacls
function. - Create an ACL list that contains these privileges with the WHM API 1
saveacllist
function. Then, assign that ACL list to the account. For more information, read our Guide to WHM Plugins - ACL Reference Chart documentation.
Load an ACL List
To load a preconfigured ACL list, select that list from the Load an ACL List menu. To add ACLs for the current reseller, select the checkbox for each ACL to add to the reseller account.
Only root
or resellers with root
-level access can modify ACLs for other resellers.
Basic Privileges
These ACLs grant access to basic cPanel account information. The ACLs also allow resellers to perform session management. The server enables these privileges by default.
Initial Privileges
ACL | Description | API value |
---|---|---|
Account Summary | Allows resellers to view their cPanel accounts’ information. | acct-summary |
Basic System Information | Allows resellers to retrieve basic system information. | basic-system-info |
Basic WHM Functions | Allows resellers to access basic cPanel & WHM options in WHM’s Basic WebHostManager Setup interface (WHM >> Home >> Server Configuration >> Basic WebHost Manager Setup). | basic-whm-functions |
Allow CORS HTTP Requests | Allows resellers to perform Cross-Origin Resource Sharing (CORS) requests. | cors-proxy-get |
Perform cPanel API and UAPI functions through the WHM API | Allow resellers to execute cPanel API 1, cPanel API 2, and UAPI functions via WHM. | cpanel-api |
Manage cPanel Integration Links | Allows resellers to manage integration links in the cPanel interface. | cpanel-integration |
Create User Session | Allows resellers to create a temporary user session. | create-user-session |
Digest Authentication | Allows resellers to enable or disable Digest Authentication in cPanel’s Web Disk interface (cPanel >> Home >> Files >> Web Disk). | digest-auth |
Generate Mobile Email Configurations | Allows resellers to generate email account configurations for a specific email client. | generate-email-config |
List Packages | Allows resellers to view existing packages. | list-pkgs |
Manage API Tokens | Allows resellers to create, list, update, and revoke API tokens. | manage-api-tokens |
Manage DNS Records | Allows resellers to manage DNS records. | manage-dns-records |
Manage OpenID Connect | Allows resellers to manage their server’s OpenID Connect-compliant identity providers. | manage-oidc |
Manage Styles | Allows resellers to manage their cPanel accounts’ style information. | manage-styles |
MySQL Information | Allows resellers to view information about their MySQL® databases. | mysql-info |
Nameserver Configuration | Allows resellers to manage nameserver records. | ns-config |
Public Contact Information | Allows resellers to manage where to direct hosting provider contact information requests. | public-contact |
SSL Information | Allows resellers to view detailed SSL resource information. | ssl-info |
Track Email | Allows resellers to view a report about the delivery route for their cPanel accounts. Resellers can use this report to find problems with email delivery. | track-email |
Standard Privileges
These ACLs allow resellers to view their cPanel accounts and the bandwidth that they use. The Standard Privileges ACLs include the following groups:
- Account Information
- Account Management
- DNS
- Packages
- Third-Party Services
- Troubleshooting
- cPanel Management
Account Information
ACL | Description | API value |
---|---|---|
List Accounts | Provides access to WHM’s List Accounts interface (WHM >> Home >> Account Information >> List Accounts). | list-accts |
View Account Bandwidth Usage | Allows the reseller to view bandwidth usage through WHM’s View Bandwidth Usage interface (WHM >> Home >> Account Information >> View Bandwidth Usage). | show-bandwidth |
Account Management
ACL | Description | API value |
---|---|---|
Create Accounts | Allows resellers to create new cPanel accounts. | create-acct |
Terminate Accounts | Allows resellers to terminate cPanel accounts that they own. | kill-acct |
Suspend/Unsuspend Accounts | Allows resellers to suspend and unsuspend cPanel accounts that they own. | suspend-acct |
Upgrade/Downgrade Accounts | Allows resellers to upgrade or downgrade cPanel accounts that they own. | upgrade-account |
SSL Site Management | Allows resellers to manage keys, CSRs, and certificates for their sites. | ssl |
Purchase SSL Certificates | Allows resellers to purchase third-party SSL certificates. | ssl-buy |
SSL CSR/Certificate Generator | Allows resellers to access and generates certificates. | ssl-gencrt |
Edit MX Entries | Allows resellers to edit MX (mail exchanger) entries. MX entries specify how the server routes mail. | edit-mx |
Change Passwords | Allows resellers to change passwords for cPanel accounts that they own. | passwd |
File and Directory Restoration | Allows resellers to restore items from local backup sources. | file-restore |
DNS
ACL | Description | API value |
---|---|---|
Add DNS Zones | Allows resellers to add DNS zones. | create-dns |
Remove DNS Zones | Allows resellers to remove DNS zones. | kill-dns |
Park DNS Zones | Allows resellers to park domains. | park-dns |
Edit DNS Zones | Allows resellers to edit DNS zones. | edit-dns |
Packages
ACL | Description | API value |
---|---|---|
Add/Remove Packages | Allows resellers to add and remove cPanel user packages. | add-pkg |
Edit Packages | Allows resellers to edit existing cPanel user packages. | edit-pkg |
Third-Party Services
ACL | Description | API value |
---|---|---|
Manage Third-Party Services | Allows resellers to manage addon services such as plugins and cPAddons.
Note:
These privileges only appear if third-party software plugins exist on your WHM account.
|
thirdparty |
Troubleshooting
ACL | Description | API value |
---|---|---|
Troubleshoot Mail Delivery | Allows resellers to use WHM’s Mail Troubleshooter interface (WHM >> Home >> Email >> Mail Troubleshooter). | mailcheck |
Was this answer helpful?
Was this answer helpful?
Related Articles
Overview: This feature allows you to transfer multiple accounts to a reseller. Transfer...
Overview: This interface allows you to email every cPanel reseller simultaneously. Note:...
Overview: This interface allows you to control a reseller’s access to the server’s IP addresses....
Overview: This interface allows you to specify a shared IP address for a reseller. Multiple...
Overview: This interface adds or removes reseller status for existing accounts. You can also use...