Child pages
  • Edit Reseller Nameservers and Privileges
For cPanel & WHM version 74

Skip to end of metadata
Go to start of metadata

(WHM >> Home >> Resellers >> Edit Reseller Nameservers and Privileges)

Overview

This interface allows you to configure a reseller's ability to access certain privileges via Access Control Lists (ACLs). For example, you can perform the following actions:

  • Limit a reseller’s ability to create accounts.
  • Confer root-level privileges to a reseller. 
  • Assign nameserver IP addresses for accounts that the reseller creates, and add A entries for those addresses.

Important:

  • Before you begin, make certain that you select the correct reseller from either of the following locations:
    • The Reseller Actions for menu in WHM's Reseller Center interface (WHM >> Home >> Resellers >> Reseller Center).
    • The reseller menu in this interface.
  • If only one reseller exists, the interface automatically selects that reseller.

Account Creation Limits

The WHM interface offers four methods to limit a reseller’s ability to create cPanel accounts. A server that contains several cPanel accounts can deplete resources and cause it to run slowly. Use any of the following three methods to prevent resource depletion:

Limit the total number of accounts that a reseller can create

To limit the total number of accounts that a reseller can create, perform the following steps:

  1. Select the Limit the total number of accounts reseller can create checkbox.
  2. Enter the maximum number of accounts to allow the reseller to create in the text box.

Limit a reseller account by resource usage

Warning:

Resource limits only function on accounts that you assign to packages. If an account does not use a hosting package, resource limits do not apply. To limit resellers in this way, you must require them to assign all of their accounts to a package. To do this, deselect all of the checkboxes under the Super Privileges heading in the reseller's feature list.

For more information, read our Package documentation.

To limit accounts by resource usage, select the Limit accounts that reseller can create by Resource Usage checkbox. This allows you to specify a maximum amount of disk space, a maximum bandwidth, or both, in Megabytes (MB).

To limit a reseller account by resource usage, perform the following steps:

  1. Select the Limit accounts that reseller can create by Resource Usage checkbox. The Resource Usage Limits options will appear.
  2. Enter the quotas, in megabytes, that you wish to allocate in the Maximum Allowed Disk Space and Maximum Allowed Bandwidth text boxes. You cannot enter an unlimited value in these text boxes.

    Note:

    You must provide values in both of these text boxes. However, if you want to limit a single option, enter a very large numerical value in the opposite option's text box. For example, enter a 99999999 value in the Maximum Allowed Disk Space text box then enter a 1024 value in the Maximum Allowed Bandwidth text box to limit the bandwidth to 1024 MB.

  3. Select the Allow Overselling checkbox next to each resource that you wish to allow your reseller to oversell.

    Note:

    You can allow a reseller to limit their users’ resources by the amount that they actually use rather than the amount that you allocate to the reseller. This allows resellers to set quotas for their users that exceed the amount that you allocate for the reseller (overselling).

    For example, if you enable overselling and you allocate 500 MB of disk space to the reseller, that reseller may still set up disk quotas of 300 MB each for two users. The two users can use 600 MB; however, when their combined disk space usage exceeds 500 MB, the reseller can no longer create new accounts. For more information about overselling, read our Overselling documentation.

Specify which packages a reseller can use to create accounts

Packages allow your reseller to specify options for cPanel accounts. For example, a reseller can limit a cPanel account's amount of monthly bandwidth, or number of subdomains. For more information about packages, read our Add a Package documentation.

Notes:

  • To reset a package for a reseller, read our Reset Resellers documentation.
  • If you choose to limit a reseller by package, you cannot enter an unlimited value.
  • Some packages do not comply with resource limits.
  • Accounts with an unlimited bandwidth quota or unlimited disk space quota are not resource limit compatible.

To specify which packages a reseller can use to create accounts, perform the following steps:

  1. Select Specify which packages reseller can use for account creation. The Package Limits options will appear.
  2. Select the Creation Allowed checkbox for each package that you wish to allow the reseller to use.

  3. To set a maximum number of accounts per package, select Limit the number of accounts that a reseller can create per package.
    1. Enter the number of packages that you wish to allow this reseller to sell for each package in the Number Allowed text box.

      Important:

      You must select the desired Creation Allowed checkboxes to allow the reseller to use that package.

Feature Limits (ACL Lists)

You can use ACLs to manage your resellers’ privilege to access certain WHM features. For example, you can grant or deny the privilege to use WHM's List Accounts interface (WHM >> Home >> Account Information >> List Accounts).

Warnings:

  • You must correctly configure your Super Privileges and Root Access privileges. Carefully read the warnings for each ACL before you grant a reseller a particular ACL. Many of the Super Privileges ACLs allow resellers to circumvent the limits that you impose.
  • If you grant root-level access to a reseller, that reseller will possess the same privileges as the root user.

Notes:

  • By default, the system assigns the Initial Privileges options to newly-created reseller accounts. If you remove any of these privileges, it may negatively impact the WHM experience of resellers.
  • You can also edit ACL options with one of the following methods:
  • For more information, read our Guide to WHM Plugins - ACL Reference Chart documentation.

Load an ACL List

To load a preconfigured ACL list, select that list from the Load an ACL List menu. To add ACLs for the current reseller, select the checkbox for each ACL that you wish to add to the reseller account.

Note:

Only root or resellers with root-level access can assign or unassign ACLs to other resellers.

You can save an ACL list and apply the same privilege configuration to other resellers. At the bottom of the interface, you can create a new list, update an existing list, or only apply the configuration to the current reseller.

  • To save the ACL list for later use, select Save selections as a new ACL list, provide a ACL list name, and then click Save All Settings.
  • To update an existing ACL list, click Save selections as an existing ACL list, select the list to update, and then click Save All Settings.
  • To apply the privileges to the current reseller and not save any changes, and not update an ACL lists, select Do not save selections, and click Save All Settings.

To grant the privilege to use certain features, select the corresponding checkbox. You can configure the following privileges:

Basic Privileges

Initial Privileges

Note:

By default, the system assigns the Initial Privileges to newly-created reseller accounts. If you remove any of these privileges, it may negatively impact the WHM experience of resellers.


  • Account Summary — Allows resellers to view their accounts' information.

  • Basic System Information — Allows resellers to retrieve basic system information. For example, the server's hostname and cPanel & WHM version number.

  • Basic WHM Functions — Allows resellers to access basic cPanel & WHM options in WHM's Basic WebHost Manager Setup interface (WHM >> Home >> Server Configuration >> Basic WebHost Manager® Setup).

  • Allow CORS HTTP Requests — Allows resellers to perform Cross-Origin Resource Sharing (CORS) requests.

  • Perform cPanel API and UAPI functions through the WHM API — Allows resellers to execute cPanel API 1cPanel API 2 and UAPI functions via WHM.

  • Manage cPanel Integration Links — Allows resellers to manage integration links in the cPanel interface.

  • Create User Session — Allows resellers to create a temporary user session.

  • Digest Authentication — Allows resellers to enable or disable Digest Authentication in cPanel's Web Disk interface (cPanel >> Home >> Files >> Web Disk).

  • Generate Mobile Email Configurations — Allows resellers to generate email account configurations for a specific email client.

  • List Packages Allows resellers to view existing packages.

  • Manage API Tokens — Allows resellers to create, list, update, and revoke API tokens.

  • Manage DNS Records — Allows resellers to manage DNS records.

  • Manage OpenID Connect — Allows resellers to manage their server's OpenID Connect-compliant identity providers.

  • Manage Styles — Allows resellers to manage their accounts' style information.

  • MySQL Information — Allows resellers to view infomration about their MySQL® databases.

  • Nameserver Configuration — Allows resellers to manage nameserver records.

  • Public Contact Information — Allows resellers to manage where to direct hosting provider contact information requests.

  • SSL Information — Allows resellers to view detailed SSL resource information.

  • Track Email — Allows resellers to view reports about email message delivery attempts from their account in cPanel's Track Delivery interface (cPanel >> Home >> Email >> Track Delivery).

Standard Privileges

Account Information

  • List Accounts — Provides access to the WHM's List Accounts interface (WHM >> Home >> Account Information >> List Accounts).

  • View Account Bandwidth Usage — Allows the reseller to view bandwidth usage through WHM's View Bandwidth Usage interface (WHM >> Home >> Account Information >> View Bandwidth Usage).

Account Management

  • Create Accounts — Allows resellers to create new cPanel accounts.

  • Terminate Accounts — Allows resellers to terminate accounts that they own.

  • Suspend/Unsuspend Accounts — Allows resellers to suspend and unsuspend accounts that they own.

  • Upgrade/Downgrade Accounts — Allows resellers to upgrade or downgrade accounts that they own.

  • SSL Site Management — Allows resellers to manage keys, CSRs, and certificates for their sites.

  • Purchase SSL Certificates — Allows resellers to purchase third-party SSL certificates.

  • SSL CSR/Certificate Generator — Allows resellers to access and generate certificates.

  • Edit MX Entries — Allows resellers to edit MX (mail exchanger) entries. MX entries specify how the server routes mail.

  • Change Passwords — Allows resellers to change passwords for accounts that they own.

  • File and Directory Restoration — Allows resellers to restore items from local backup sources.

DNS

  • Add DNS Zones — Allows resellers to add DNS zones.

  • Remove DNS Zones — Allows resellers to remove DNS zones.

  • Park DNS Zones — Allows resellers to park domains.

  • Edit DNS Zones — Allows resellers to edit DNS zones.

Packages

  • Add/Remove Packages— Allows resellers to add and remove cPanel user packages.

  • Edit Packages — Allows resellers to edit existing cPanel user packages.

Third-Party Services

Note:

These privileges only appear if third-party software plugins exist on your account.

  • Manage Third-Party Services — Allows resellers to manage addon services such as plugins and cPAddons.

Troubleshooting

  • Troubleshoot Mail Delivery — Allows resellers to use WHM's Mail Troubleshooter interface (WHM >> Home >> Email >> Mail Troubleshooter).

cPanel Management

  • News Modification — Allows resellers to add news in WHM's Modify cPanel & WHM News interface (WHM >> Home  >> cPanel >> Modify cPanel & WHM).

Package Privileges

Accounts

  • Allow Creation of Accounts with Shell Access — Allows resellers to create accounts that possess shell access.

Package Access

  • Use Root Packages — Allows resellers to use global packages. Reseller-specific packages contain an underscore (_) in the package name. Global packages do not include an underscore (_) in the package name.

Package Creation

  • Create Packages with Addon Domains — Allows resellers to create packages that include addon domains.
  • Create Packages with Parked (Alias) Domains — Allows resellers to create packages that include parked domains (aliases).
  • Create Packages with a Dedicated IP Address — Allows resellers to create packages that include a dedicated IP address.
  • Create Packages with Shell Access — Allows resellers to create packages that grant shell access.
  • Create Packages with Unlimited Features — Allows resellers to set an unlimited quota on one or more package settings.
  • Create Packages with Custom Email Limits — Allows resellers to create packages with custom email quotas.
  • Create Packages with Unlimited Disk Usage — Allows resellers to create packages with an unlimited disk quota.
  • Create Packages with Unlimited Bandwidth — Allows resellers to create packages with unlimited bandwidth.

Global Privileges

Server Information

  • View Server Status — Allows resellers to view all of the features in WHM's Server Status interface (WHM >> Home >> Server Status >> Server Status).

  • View Server Information — Allows resellers to view WHM's Server Information interface (WHM >> Home  >> Server Status >> Server Information).

Services

  • Restart Services — Allows resellers to restart cPanel & WHM services.

Troubleshooting

  • Resynchronize FTP Passwords — Allows resellers to access WHM's Synchronize FTP Passwords interface (WHM >> Home >> cPanel >> Synchronize FTP Passwords).

Super Privileges

Account Management

  • Account Modification — Allows resellers to change an existing account in WHM's Modify an Account interface (WHM >> Home >> Account Functions >> Modify an Account).

    Warning:

    This privilege allows users to circumvent account creation limits and grant shell access but it does not allow them to change an account's IP address.

  • Bandwidth Limiting Modification — Allows resellers to change an account's bandwidth usage limit in WHM's View Bandwidth Usage interface (WHM >> Home >> Account Functions >> View Bandwidth Usage).

    Warning:

    This privilege allows users to circumvent account package limits if you do not also use resource limits.
  • Quota Modification — Allows resellers to change an account’s disk space quota in WHM's Quota Modification interface (WHM >> Home  >> Account Functions >> Quota Modification).

    Warning:

    This privilege allows users to circumvent account package limits if you do not also use resource limits.

  • Set an Account to be a Demo Account — Allows the reseller to enable a demonstration mode for an account.

Advanced Account Management

  • Rearrange Accounts — Allows resellers to move accounts between directories. Select this privilege to optimize disk usage across disk drives.

Clustering

  • DNS Clustering — Allows resellers to access WHM's DNS Cluster interface (WHM >> Home  >> Clusters >> DNS Cluster).

    Warning:

    This privilege allows a reseller to bypass many DNS zone modification restrictions.

Locales

  • Modify & Create Locales — Allows resellers to access WHM's View Available Locales interface (WHM >> Home >> Locales >> View Available Locales). 

Root Access

Everything

  • All Features — Allows resellers complete access to the entire system.

    Warning:

    This option grants a reseller root-level privileges on the server.

Nameservers

This feature allows you to set the default nameserver IP addresses, which the system assigns to new accounts that the reseller creates. Available IP addresses must exist on your server to use this feature. If you currently use all of your IP addresses, then you must purchase more from your internet service provider (ISP) or hosting provider. Add them to the server before you set up nameserver IP addresses. We recommend that you select Inherit Nameservers from root to use the same nameservers as the root user. To enter custom nameservers for your primary, secondary, tertiary, and quaternary nameservers, select Explicitly Set the Nameservers then enter the appropriate information.

A entries allow your nameserver to resolve to an IP address. To add an A entry or a AAAA entry for a nameserver, select Explicitly Set the Nameservers and perform the following steps:

  1. Click Configure Address Records. A new window will appear.
  2. In the new window, enter an IPv4 address to create an A record. You may additionally enter an IPv6 address to create a AAAA record.
    • Your nameservers require A entries to work properly.
    • Your nameservers require AAAA entries to work over IPv6 properly.
  3. Click Configure Address Records

Warning:

You must register your nameserver's domain names. The system uses the ns prefix as a naming convention in connection with a positive whole number to describe nameservers (for example, ns1.example.com or ns2.example.com).

Save settings

To save changes, you must click Save All Settings

Additional documentation


Note:

Only root or resellers with root-level access can assign or unassign ACLs to other resellers.