Edit Reseller Nameservers and Privileges

Valid for versions 98 through the latest version

Version:

98


Last modified: December 1, 2022

Overview

This interface allows you to modify reseller permissions. You can set cPanel account creation limits and quotas for resellers. You can also select which privileges a particular reseller can access. You control these privileges with Access Control Lists (ACLs). For example, you can perform the following actions:

  • Limit a reseller’s ability to create cPanel accounts.
  • Assign nameserver IP addresses for cPanel accounts that the reseller creates. This setting also adds A entries for those addresses.
Important:
Make certain that you select the correct reseller.

To modify limits and privileges, select the reseller that you wish to modify, then click Submit.

If only one reseller exists, the interface automatically selects that reseller. Alternatively, use the Reseller Actions for menu in WHM’s Reseller Center interface (WHM » Home » Resellers » Reseller Center).

Account Creation Limits

This interface uses three methods to limit a reseller’s ability to create cPanel accounts. A server that contains many cPanel accounts can deplete resources and cause it to run slowly. Use any of the following methods to prevent resource depletion:

Total number of accounts

To limit the total number of cPanel accounts that a reseller can create, perform the following steps:

  1. Select the Limit the total number of accounts reseller can create checkbox.
  2. Enter the maximum number of cPanel accounts to allow the reseller to create in the text box.

Limit by resource usage

Warning:
  • Resource limits only function on cPanel accounts that you assign to packages. If a cPanel account does not use a hosting package, resource limits do not apply. To limit resellers in this way, you must require them to assign all of their cPanel accounts to a package. To do this, deselect all of the checkboxes under the Super Privileges heading in the reseller’s feature list.
  • If you select this setting, you cannot select the following privileges:
    • Create Packages with Unlimited Disk Usage.
    • Create Packages with Unlimited Bandwidth.

To limit cPanel accounts by resource usage, select the Limit accounts that reseller can create by Resource Usage checkbox. This setting allows you to specify a maximum amount of disk space, bandwidth, or both, in megabytes (MB).

To limit a reseller account by resource usage, perform the following steps:

  1. Select the Limit accounts that reseller can create by Resource Usage checkbox. The Resource Usage Limits settings will appear.
  2. Enter the quotas, in megabytes, in the Maximum Allowed Disk Space and Maximum Allowed Bandwidth text boxes. You cannot enter an unlimited value in these text boxes.
    Note:

    You must provide values in both of these text boxes. However, if you want to limit a single setting, enter a very large numerical value in the opposite setting’s text box. For example, enter a 99999999 value in the Maximum Allowed Disk Space text box. Then, enter a 1024 value in the Maximum Allowed Bandwidth text box to limit the bandwidth to 1024 MB.

  3. Select the Allow Overselling checkbox next to each resource that you wish to allow your reseller to oversell.
    Note:

    Overselling combines the actual disk space used by a reseller’s cPanel accounts. If you do not enable overselling, resellers can only assign quotas that add up to the amount that you set.

Specify packages

Packages allow your reseller to specify settings for cPanel accounts. For example, a reseller can limit a cPanel account’s amount of monthly bandwidth or the number of subdomains. For more information about packages, read our Add a Package documentation.

Note:
  • To reset a package for a reseller, read our Reset Resellers documentation.
  • If you choose to limit a reseller by package, you cannot enter an unlimited value.
  • Some packages do not comply with resource limits.
  • You cannot apply a resource limit to cPanel accounts with an unlimited bandwidth or disk space quota.

To specify which packages a reseller can use to create cPanel accounts, perform the following steps:

  1. Select Specify which packages reseller can use for account creation. The Package Limits settings will appear.
  2. Select the Creation Allowed checkbox for each package that you wish to allow the reseller to use.
    Important:

    You must select the desired Creation Allowed checkboxes to allow the reseller to use that package.

  3. To set a maximum number of cPanel accounts per package, select Limit the number of accounts that a reseller can create per package. Enter the number of packages that you wish to allow this reseller to sell for each package in the Number Allowed text box.

Account Enhancement Assignment Limits

Note:
  • If you have not installed any third-party applications that use Account Enhancements, the Account Enhancement Assignment Limits section will not appear.
  • You must enable the Use Root Account Enhancements ACL to set Account Enhancement limits.

Use this section to set limits for how many Account Enhancements that a reseller can assign to the cPanel accounts they own.

To update the reseller’s Account Enhancement limit, perform the following steps.

  1. Locate the Account Enhancement ID that you wish to edit in the table.
  2. Set the Account Enhancement limit:
    • Enter the maximum number of Account Enhancements in the Assignment Limit text box.
    • To allow unlimited Account Enhancement assignments, select the Unlimited option.
    • To disallow Account Enhancement assignments, enter 0 in the Assignment Limit text box.
  3. Click Save All Settings.

Feature Limits (ACL Lists)

You can use ACLs to manage your resellers’ privilege to access certain WHM features. For example, you can grant or deny the privilege to use WHM’s List Accounts interface (WHM » Home » Account Information » List Accounts). By default, the system assigns the Initial Privileges settings to newly-created reseller accounts.

Warning:
  • You must correctly configure your Super Privileges and Root Access privileges. Carefully read the warnings for each ACL before you grant a reseller a particular ACL. Many of the Super Privileges ACLs allow resellers to circumvent the limits that you impose.
  • Granting root-level access to a reseller will grant the same privileges as the root user.

You can also edit ACL settings with one of the following methods:

Load an ACL List

To load a preconfigured ACL list, select that list from the Load an ACL List menu. To add ACLs for the current reseller, select the checkbox for each ACL to add to the reseller account.

Note:

Only root or resellers with root-level access can modify ACLs for other resellers.

Basic Privileges

These ACLs grant access to basic cPanel account information. The ACLs also allow resellers to perform session management. The server enables these privileges by default.

Initial Privileges

ACL Description API value
Account Summary Allows resellers to view their cPanel accounts’ information. acct-summary
Basic System Information Allows resellers to retrieve basic system information. basic-system-info
Basic WHM Functions Allows resellers to access basic cPanel & WHM options in WHM’s Basic WebHost Manager Setup interface (WHM » Home » Server Configuration » Basic WebHost Manager Setup). basic-whm-functions
Configure connected external applications Allows resellers to configure connected external applications. connected-applications
Allow CORS HTTP Requests Allows resellers to perform Cross-Origin Resource Sharing (CORS) requests. cors-proxy-get
Perform cPanel API and UAPI functions through the WHM API Allow resellers to execute cPanel API 1, cPanel API 2, and UAPI functions via WHM. cpanel-api
Manage cPanel Integration Links Allows resellers to manage integration links in the cPanel interface. cpanel-integration
Create User Session Allows resellers to create a temporary user session. create-user-session
Digest Authentication Allows resellers to enable or disable Digest Authentication in cPanel’s Web Disk interface (cPanel » Home » Files » Web Disk). digest-auth
Generate Mobile Email Configurations Allows resellers to generate email account configurations for a specific mail client. generate-email-config
List Packages Allows resellers to view existing packages. list-pkgs
Manage API Tokens Allows resellers to create, list, update, and revoke API tokens. manage-api-tokens
Manage DNS Records Allows resellers to manage DNS records. manage-dns-records
Manage OpenID Connect Allows resellers to manage their server’s OpenID Connect-compliant identity providers. manage-oidc
Manage Styles Allows resellers to manage their cPanel accounts’ style information. manage-styles
MySQL Information Allows resellers to view information about their MySQL® databases. mysql-info
Nameserver Configuration Allows resellers to manage nameserver records. ns-config
Public Contact Information Allows resellers to manage where to direct hosting provider contact information requests. public-contact
SSL Information Allows resellers to view detailed SSL resource information. ssl-info
Track Email Allows resellers to view a report about the delivery route for their cPanel accounts. Resellers can use this report to find problems with email delivery. track-email

Standard Privileges

These ACLs allow resellers to view their cPanel accounts and the bandwidth that they use. The Standard Privileges ACLs include the following groups:

Account Information

ACL Description API value
List Accounts Provides access to WHM’s List Accounts interface (WHM » Home » Account Information » List Accounts). list-accts
View Account Bandwidth Usage Allows the reseller to view bandwidth usage through WHM’s View Bandwidth Usage interface (WHM » Home » Account Information » View Bandwidth Usage). show-bandwidth

Account Management

ACL Description API value
Create Accounts Allows resellers to create new cPanel accounts. create-acct
Terminate Accounts Allows resellers to terminate cPanel accounts that they own. kill-acct
Suspend/Unsuspend Accounts Allows resellers to suspend and unsuspend cPanel accounts that they own. suspend-acct
Upgrade/Downgrade Accounts Allows resellers to upgrade or downgrade cPanel accounts that they own. upgrade-account
SSL Site Management Allows resellers to manage keys, CSRs, and certificates for their sites. ssl
Purchase SSL Certificates Allows resellers to purchase third-party SSL certificates. ssl-buy
SSL CSR/Certificate Generator Allows resellers to access and generates certificates. ssl-gencrt
Edit MX Entries Allows resellers to edit MX (mail exchanger) entries. MX entries specify how the server routes mail. edit-mx
Change Passwords Allows resellers to change passwords for cPanel accounts that they own. passwd
File and Directory Restoration Allows resellers to restore items from local backup sources. file-restore

DNS

ACL Description API value
Add DNS Zones Allows resellers to add DNS zones. create-dns
Remove DNS Zones Allows resellers to remove DNS zones. kill-dns
Park DNS Zones Allows resellers to park domains. park-dns
Edit DNS Zones Allows resellers to edit DNS zones. edit-dns

Packages

ACL Description API value
Add/Remove Packages Allows resellers to add and remove cPanel user packages. add-pkg
Edit Packages Allows resellers to edit existing cPanel user packages. edit-pkg

Third-Party Services

ACL Description API value
Manage Third-Party Services Allows resellers to manage addon services such as plugins and cPAddons.
Note:
These privileges only appear if third-party software plugins exist on your WHM account.
thirdparty

Troubleshooting

ACL Description API value
Troubleshoot Mail Delivery Allows resellers to use WHM’s Mail Troubleshooter interface (WHM » Home » Email » Mail Troubleshooter). mailcheck

cPanel Management

ACL Description API value
News Modification Allows resellers to add news in WHM’s Modify cPanel & WHM News interface (WHM » Home » cPanel » Modify cPanel & WHM News). news

Account Enhancements

ACL Description API value
Use Root Account Enhancements Allows resellers to assign and unassign Account Enhancements to their cPanel accounts. assign-root-account-enhancements

Package Privileges

The following ACLs allow resellers to create, use, and modify cPanel account packages.

Accounts

ACL Description API value
Allow Creation of Accounts with Shell Access Allows resellers to create cPanel accounts that possess shell access. allow-shell

Package Access

ACL Description API value
Use Root Packages Allows resellers to use global packages. Reseller-specific packages contain an underscore ( _ ) in the package name. Global packages do not include an underscore ( _ ) in the package name. viewglobalpackages

Package Creation

ACL Description API value
Create Packages with Addon Domains Allows resellers to create packages that include addon domains. allow-addoncreate
Create Packages with Parked (Alias) Domains Allows resellers to create packages that include parked domains (aliases). allow-parkedcreate
Create Packages with Dedicated IP Address Allows resellers to create packages that include a dedicated IP address. add-pkg-ip
Create Packages with Shell Access Allows resellers to create packages that grant shell access. add-pkg-shell
Create Packages with Unlimited Features Allows resellers to set an unlimited quota on one or more package settings. allow-unlimited-pkgs
Create Packages with Custom Email Limits Allows resellers to create packages with custom email quotas. allow-emaillimits-pkgs
Create Packages with Unlimited Disk Usage Allows resellers to create packages with an unlimited disk quota. allow-unlimited-disk-pkgs
Create Packages with Unlimited Bandwidth Allows resellers to create packages with unlimited bandwidth. allow-unlimited-bw-pkgs

Global Privileges

The following ACLs grant access to server-level information and configurations. The Global Privileges ACLs include the following groups:

Server Information

ACL Description API value
View Server Status Allows resellers to view all of the features in WHM’s Service Status interface (WHM » Home » Server Status » Service Status). status
View Server Information Allows resellers to view WHM’s Server Information interface (WHM » Home » Server Status » Server Information). stats

Services

ACL Description API value
Restart Services Allows resellers to restart cPanel & WHM services. restart

Troubleshooting

ACL Description API value
Resynchronize FTP Passwords Allows resellers to access WHM’s Synchronize FTP Passwords interface (WHM » Home » cPanel » Synchronize FTP Passwords). resftp

Super Privileges

The following ACLs grant root-level access configurations.

Warning:

These privileges allow resellers to bypass cPanel account package limits if you do not also use resource limits.

The Super Privileges ACLs include the following groups:

Account Management

ACL Description API value
Account Modification Allows resellers to change an existing cPanel account in WHM’s Modify an Account interface (WHM » Home » Account Functions » Modify an Account).
Warning:

This privilege grants shell access unless you explicitly disallow it. However, it does not allow resellers to change a cPanel account’s IP address.

edit-account
Bandwidth Limiting Modification Allows resellers to change a cPanel account’s bandwidth usage limit in WHM’s View Bandwidth Usage interface (WHM » Home » Account Functions » View Bandwidth Usage). limit-bandwidth
Quota Modification Allows resellers to change a cPanel account’s disk space quota in WHM’s Quota Modification interface (WHM » Home » Account Functions » Quota Modification). quota
Set an Account to be a Demo Account Allows the reseller to enable a demonstration mode for a cPanel account. demo-setup

Advanced Account Management

ACL Description API value
Rearrange Accounts Allows resellers to move cPanel accounts between folders and hard drives. Select this privilege to optimize disk usage across disk drives. rearrange-accts

Clustering

ACL Description API value
DNS Clustering Allows resellers to access WHM’s DNS Cluster interface (WHM » Home » Clusters » DNS Cluster).
Warning:
This privilege allows a reseller to bypass many DNS zone modification restrictions.
clustering

Locales

ACL Description API value
Modify & Create Locales Allows resellers to access WHM’s View Available Locales interface (WHM » Home » Locales » View Available Locales). locale-edit

Root Access

Warning:
This option grants resellers unrestricted access to all server functionality. Only grant this permission to resellers that you completely trust.
The following ACL grants a reseller root-level privileges on the server.

Everything

ACL Description API value
All Features Allows resellers complete access to the entire system. all

Save the ACL List

You can save an ACL list and apply the same privilege configuration to other resellers. To do this, perform one of the following actions:

  • Save selections as a new ACL list — Saves the ACL list for future use. Select the option, enter an ACL list name, then click Save All Settings to save.
  • Save selections as an existing ACL list — Updates an existing ACL list. Select the option, select the list to update from the menu, then click Save All Settings to save.
  • Do not save selections — Applies privileges to the current reseller, but does not save any changes, and does not update any ACL lists. Select this option and click Save All Settings to save.

Nameservers

Use this section to set the default nameserver IP addresses. The server assigns these addresses to new cPanel accounts that the reseller creates. Available IP addresses must exist on your server to use this feature.

No available IP addresses

You may currently be using all of your IP addresses. If so, then you must purchase more from your internet service provider (ISP) or hosting provider. Add them to the server before you set up nameserver IP addresses. We recommend that you select Inherit Nameservers from root to use the same nameservers as the root user.

Custom nameservers

You can enter custom nameservers for your primary, secondary, tertiary, and quaternary nameservers. To do this, select Explicitly Set the Nameservers and then enter the appropriate information.

A and AAAA entries

A entries allow your nameserver to resolve to an IP address. To add an A entry or a AAAA entry for a nameserver, select Explicitly Set the Nameservers and perform the following steps:

  1. Click Configure Address Records. A new window will appear.
  2. In the new window, enter an IPv4 address to create an A record. You may additionally enter an IPv6 address to create a AAAA record.
    • Your nameservers require A entries to work properly.
    • Your nameservers require AAAA entries to work over IPv6 properly.
  3. Click Configure Address Records.
    Warning:

    You must register your nameserver’s domain names. The server uses the ns prefix, and a positive whole number to describe nameservers. For example, ns1.example.com or ns2.example.com).

Save settings

To save your changes, you must click Save All Settings.

Additional Documentation