Page tree
Skip to end of metadata
Go to start of metadata

 

Introduction

cPanel & WHM ships with a default list of Access Control Lists (ACLs) and privileges. You can assign ACLs and privileges to WHM users in WHM's Edit Reseller Nameservers and Privileges interface (WHM  >> Home >> Resellers >> Edit Reseller Nameservers and Privileges). 

Available ACLs

Note:

In the tables below, the Feature limit column lists the privilege's name in WHM's Edit Reseller Nameservers and Privileges interface (WHM >> Home >> Resellers >> Edit Reseller Nameservers and Privileges). 

root privileges


ACLPrivilege typeFeature limitAssociated WHM API 1 functionsDescription

all

Everything

All Features

All WHM API 1 functions.

The user possesses root-level privileges on the server.

 

Standard privileges


 

ACLPrivilege typeFeature limitAssociated WHM API 1 functionsDescription
list-acctsAccount Information

List Accounts

listaccts View the list of accounts on a server.

show-bandwidth

Account Information

View Account Bandwidth Usage

showbw View bandwidth usage statistics.

acct-summary

 

Account InformationAccount SummaryView an account's summary.

basic-whm-functions

 

Account InformationBasic WHM FunctionsAccess basic cPanel & WHM options.

create-acct

Account Management

Create Accounts

Create cPanel accounts.

kill-acct

Account Management

Terminate Accounts

removeacct Delete the cPanel accounts.

suspend-acct

 

Account Management

Suspend/Unsuspend Accounts

 

suspendacct Suspend and unsuspend cPanel accounts.

upgrade-account

Account Management

Upgrade/Downgrade Accounts


changepackage

Modify an account's hosting plan (package).

ssl

Account Management

SSL Site Management

Modify SSL information for cPanel accounts.

ssl-buy

Account Management

Purchase SSL Certificates


N/A

 

Purchase SSL certificates.

ssl-gencrt

Account Management

SSL CSR/Certificate Generator


generatessl Generate CSRs and SSL certificates.

edit-mx

Account Management

Edit MX Entries

Modify MX entries.

passwd

Account Management

Change Passwords

Note:

This privilege allows a reseller to change account passwords and allow users to log in without an API token.


Modify cPanel account passwords.

create-user-session

 

Account Management

Create User Session

Note:

This privilege allows an API token user to bypass any restrictions on the API token.


Create a new temporary user session for a specified service.

digest-auth

 

Account ManagementDigest AuthenticationManage Digest Authentication support.

generate-email-config

 

Account ManagementGenerate Mobile Email Configuration generate_mobileconfig Generate a mobile configuration profile for an email account.

manage-oidc

 

Account ManagementManage OpenID ConnectManage external authentication for an accounts.

manage-styles

 

Account ManagementManage StylesManage an accounts' cPanel styles.

mysql-info

 

Account ManagementMySQL InformationRetrieve MySQL® database and user data.

ssl-info

 

Account ManagementSSL InformationView SSL information.

manage-api-tokens

 

Account Management

Manage API Tokens.

Note:

This privilege allows an API token user to bypass any restrictions on the API token.


Manage API tokens.
create-dnsDNS

Add DNS Zones


adddns Add DNS zones.
kill-dnsDNS

Remove DNS Zones


killdns Delete DNS zones.
park-dnsDNS

Park DNS Zones


N/APark DNS zones.
edit-dnsDNS

Edit DNS Zones


N/AEdit DNS zones.

manage-dns-records

 

DNS

Manage DNS Records

Manage DNS records.

ns-config

 

DNSNameserver ConfigurationManage nameserver records.
add-pkg PackagesAdd/Remove Packages

addpkg

 

Create or delete hosting plans (packages).

edit-pkg

 PackagesEdit Packages editpkg Modify existing hosting plans (packages).

list-pkgs

 

 PackagesList PackagesView existing hosting plans (packages).
thirdpartyThird-Party ServicesManage Third-Party ServicesN/AManage third-party services (for example, plugins or cPAddons).

cors-proxy-get

 

Third-Party ServicesAllow CORS Proxy Requests

cors_proxy_get  

Perform Cross-Origin Resource Sharing (CORS) HTTP requests.

mailcheck

Troubleshooting

Troubleshoot Mail Delivery

N/AAccess WHM's Mail Troubleshooter interface (WHM >> Home >> Email >> Mail Troubleshooter).

track-email

 

TroubleshootingTrack EmailRetrieve email delivery records.
newscPanel ManagementNews ModificationN/AModify news in WHM's  Modify cPanel & WHM News interface (WHM >> Home >> cPanel >> Modify cPanel & WHM News).

basic-system-info

 

cPanel ManagementBasic System Information

 

Retrieve basic system information.

cpanel-integration

 

Manage cPanel Integration LinkscPanel IntegrationManage how a server and and its services connect to other servers and services.

 

Package privileges


 

ACLPrivilege typeFeature limitAssociated WHM API 1 functionsDescription
allow-shell AccountsAllow Creation of Accounts with Shell Access

N/A

Allow account creation with shell access.
viewglobalpackagesPackage Access

Use Root Packages

Use global hosting plans (packages) during account creation.

allow-addoncreate

Packages Creation

Create Packages with Addon Domains

Create hosting plans (packages) that include addon domains.
allow-parkedcreatePackages Creation

Create Packages with Parked (Alias) Domains

Create hosting plans (packages) that include parked domains (aliases).
add-pkg-ipPackages Creation

Create Packages with a Dedicated IP Address

Create hosting plans (packages) that include a dedicated IP address.
add-pkg-shellPackages Creation

Create Packages with Shell Access

Create hosting plans (packages) that grant shell access.
allow-unlimited-pkgsPackages Creation

Create Packages with Unlimited Features

Set an unlimited quota on one or more package settings.
allow-emaillimits-pkgsPackages Creation

Create Packages with Custom Email Limits

Create hosting plans (packages) with email quotas that are not the default quotas.
allow-unlimited-disk-pkgsPackages Creation

Create Packages with Unlimited Disk Usage

Create packages with an unlimited disk quota.
allow-unlimited-bw-pkgsPackages Creation

Create Packages with Unlimited Bandwidth

Create packages with unlimited bandwidth.

 

Global privileges


ACLPrivilege typeFeature limitAssociated API functionsDescription
statusServer InformationView Server Status configureservice View the interfaces in WHM's Server Status section (WHM >> Home >> Server Status).
statsServer InformationView Server InformationN/AView WHM's Server Information interface (WHM >> Home >> Server Status >> Server Information).
restart ServicesRestart Services restartservice Restart services on the server.
restart TroubleshootingResync FTP Passwords restartservice Access WHM's Synchronize FTP Passwords interface (WHM >> Home >> cPanel >> Synchronize FTP Passwords).

 

Super privileges


ACLPrivilege typeFeature limitAssociated WHM API 1 functionsDescription

edit-account

Account Management

Account Modification modifyacct

Modify accounts.

quotaAccount ManagementQuota Modification editquota Modify account quotas.
demo-setupAccount ManagementSet an Account to be a Demo Account.N/AEnable demo mode for an account.
limit-bandwidthAccount ManagementBandwidth Limiting ModificationN/AModify account bandwidth limits.
rearrange-acctsAdvanced Account ManagementRearrange AccountsRearrange accounts on the server in order to increase available disk space.
clusteringClusteringDNS ClusteringConfigure DNS clusters.
locale-editLocales

Modify & Create Locales

 

N/ACreate and modify locales on the server.

root  privileges

 


 

ACLPrivilege typeFeature limitAssociated WHM API 1 functionsDescription

all

Everything

All Features

All WHM API 1 functions.

The user possesses root-level privileges on the server.

 

Standard privileges

 


 

ACLPrivilege typeFeature limitAssociated WHM API 1 functionsDescription

news

cPanel Management

News Modification

n/aModify news in WHM's Modify cPanel & WHM News interface (WHM >> Home >> cPanel >> Modify cPanel & WHM News).

list-accts

Account Information

List Accounts

listaccts View the list of accounts on the server.

show-bandwidth

Account Information

View Account Bandwidth Usage

showbw View bandwidth usage statistics.

create-dns

DNS

Add

Add DNS zones.

kill-dns

DNS

Remove

Delete DNS zones.

park-dns

DNS

Park

N/APark DNS zones.

edit-dns

DNS

Edit

editzonerecord Edit DNS zones.

create-acct

Account Management

Create

createacct Create cPanel accounts.

kill-acct

Account Management

Terminate

removeacct Delete the cPanel accounts that they own.

suspend-acct

Account Management

(Un)Suspend

Suspend and unsuspend cPanel accounts.

upgrade-account

Account Management

Upgrade/Downgrade

changepackage Modify an account's hosting plan (package).

ssl

Account Management

SSL Site Management

Modify SSL information for cPanel accounts.

ssl-buy

Account Management

SSL Certificate Purchase

N/APurchase SSL certificates.

ssl-gencrt

Account Management

SSL CSR/CRT Generator

generatessl Generate CSRs and SSL certificates.

edit-mx

Account Management

Edit MX Entries

N/AModify MX entries.

passwd

Account Management

Change Passwords

passwd Modify cPanel account passwords.

mailcheck

Troubleshooting

Troubleshoot Mail Delivery

N/AAccess WHM's Mail Troubleshooter interface (WHM >> Home >> Email >> Mail Troubleshooter).

add-pkg

Packages

Add/Remove

addpkg Create or delete hosting plans (packages).

edit-pkg

Packages

Edit

editpkg Modify existing hosting plans (packages).
thirdpartyThird Party ServicesManage Third Party ServicesN/AManage third-party services on the server (for example, plugins or cPAddons).

Package privileges

 


 

ACLPrivilege typeFeature limitAssociated WHM API 1 FunctionsDescription

allow-addoncreate

Packages Creation

Allow Creation of Packages with Addon DomainsCreate hosting plans (packages) that include addon domains.
allow-parkedcreatePackages CreationAllow Creation of Packages with Parked Domains

 

Create hosting plans (packages) that include parked domains (aliases).
add-pkg-ipPackages CreationAllow Creation of Packages with a Dedicated IPCreate hosting plans (packages) that include a dedicated IP address.
add-pkg-shellPackages CreationAllow Creation of Packages with Shell AccessCreate hosting plans (packages) that grant shell access.
allow-unlimited-pkgsPackages CreationAllow Creation of Packages with Unlimited Features (ie. unlimited pop accounts)Set an unlimited quota on one or more package settings.
allow-emaillimits-pkgsPackages CreationAllow Creation of Packages with non-default Email LimitsCreate hosting plans (packages) with email quotas that are not the default quotas.
allow-unlimited-disk-pkgsPackages CreationAllow Creation of Packages with Unlimited DiskspaceCreate hosting plans (packages) with an unlimited disk quota.
allow-unlimited-bw-pkgsPackages CreationAllow Creation of Packages with Unlimited BandwidthCreate hosting plans (packages) with unlimited bandwidth.
allow-shellAccountsAllow Creation of Accounts with Shell Access

N/A

Create accounts that possess shell access.
viewglobalpackagesPackage AccessAllow the reseller to use all global packages (global packages are any packages without a "_" in them)Can use global hosting plans (packages) during account creation.

 

Global privileges

 


 

ACLPrivilege typeFeature limitAssociated WHM API 1 functionsDescription

restart

Services

Restart Services restartservice Restart services on the server.
resftp TroubleshootingResync FTP PasswordsN/A

 

Access WHM's Synchronize FTP Passwords interface (WHM >> Home >> cPanel >> Synchronize FTP Passwords).
statusServer InformationView Server Status configureservice View the interfaces in WHM's Server Status section (WHM >> Home >> Server Status).
statsServer InformationView Server Informationn/aView WHM's Server Information interface (WHM >> Home >> Server Status >> Server Information).

 

Super privileges

 


 

ACLPrivilege typeFeature limitAssociated WHM API 1 functionsDescription

edit-account

Account Management

Account Modification

modifyacct

 

Modify accounts.

quotaAccount ManagementQuota Modification

editquota

Modify account quotas.
demo-setupAccount ManagementTurn an account into a demo account.N/AEnable demo mode for an account.
limit-bandwidthAccount ManagementBandwidth Limiting ModificationN/AModify account bandwidth limits.
rearrange-acctsAdvanced Account ManagementRearrange AccountsRearrange accounts on the server to create additional disk space.
clusteringClusteringDNS ClusteringConfigure DNS clusters.
locale-editLocalesAllow modification of existing locales and creation of new localesn/aCreate and modify locales on the server.

Deprecated and removed ACLs

 


 

ACLFeature limitDescription

res-cart

Reset Shopping Cart

Reset Interchange shopping carts.

Notes:

  • cPanel & WHM version 11.38 deprecated Interchange. 
  • cPanel & WHM version 11.46 removed this ACL and all other references to Interchange from the cPanel & WHM codebase. 
  • Do not use this ACL in cPanel & WHM version 11.38 and later. 
frontpageManage Microsoft® FrontPage Extensions

Modify account FrontPage® settings.

Note:

cPanel & WHM ignores all Microsoft FrontPage settings and parameters if either of the following statements are true:

  • The server runs cPanel & WHM version 11.44 and FrontPage extensions are not installed on the server.
  • The server runs cPanel & WHM version 11.46 or later.