[Development Guides Home](/guides) >> [Guide to WHM Plugins](/guides/guide-to-whm-plugins/)

# Guide to WHM Plugins - ACL Reference Chart

## Introduction

cPanel & WHM ships with a default list of Access Control Lists (ACLs) and privileges. You can assign ACLs and privileges to WHM users in WHM's [*Edit Reseller Nameservers and Privileges*](https://docs.cpanel.net/whm/resellers/edit-reseller-nameservers-and-privileges/) interface (*WHM  >> Home >> Resellers >> Edit Reseller Nameservers and Privileges*).

## Available ACLs

div
Note:

In the tables below, the *Feature limit* column lists the privilege's name in WHM's [*Edit Reseller Nameservers and Privileges*](https://docs.cpanel.net/whm/resellers/edit-reseller-nameservers-and-privileges/) interface (*WHM >> Home >> Resellers >> Edit Reseller Nameservers and Privileges*).

### Basic privileges

The following table lists the ACLs for basic privileges and the API functions that use these ACLs:

| ACL | Privilege type | Feature limit | Associated WHM API 1 functions | Description |
|  --- | --- | --- | --- | --- |
| `acct-summary` | *Initial Privileges* | *Account Summary* | [`accountsummary`](https://api.docs.cpanel.net/openapi/whm/operation/accountsummary/)[`acctcounts`](https://api.docs.cpanel.net/openapi/whm/operation/acctcounts/)[`domainuserdata`](https://api.docs.cpanel.net/openapi/whm/operation/domainuserdata/)[`get_domain_info`](https://api.docs.cpanel.net/openapi/whm/operation/get_domain_info/) | View an account's summary. |
| `basic-system-info` | *Initial Privileges* | *Basic System Information* | [`gethostname`](https://api.docs.cpanel.net/openapi/whm/operation/gethostname/)[`get_public_ip`](https://api.docs.cpanel.net/openapi/whm/operation/get_public_ip/)[`get_shared_ip`](https://api.docs.cpanel.net/openapi/whm/operation/get_shared_ip/)[`systemloadavg`](https://api.docs.cpanel.net/openapi/whm/operation/systemloadavg/)[`version`](https://api.docs.cpanel.net/openapi/whm/operation/version/) | Retrieve basic system information. |
| `basic-whm-functions` | *Initial Privileges* | *Basic WHM Functions* | [`applist`](https://api.docs.cpanel.net/openapi/whm/operation/applist/)[`batch`](https://api.docs.cpanel.net/openapi/whm/operation/batch/)[`get_available_applications`](https://api.docs.cpanel.net/openapi/whm/operation/get_available_applications/)[`myprivs`](https://api.docs.cpanel.net/openapi/whm/operation/myprivs/)[`personalization_get`](https://api.docs.cpanel.net/openapi/whm/operation/personalization_get/)[`personalization_set`](https://api.docs.cpanel.net/openapi/whm/operation/personalization_set/) | Access basic cPanel & WHM options. |
| `connected-applications` | *Initial Privileges* | *Configure connected external applications* | [`fetch_connected_application`](https://api.docs.cpanel.net/openapi/whm/operation/fetch_connected_application/)[`list_connected_applications`](https://api.docs.cpanel.net/openapi/whm/operation/list_connected_applications/)[`remove_connected_application`](https://api.docs.cpanel.net/openapi/whm/operation/remove_connected_application/)[`save_connected_application`](https://api.docs.cpanel.net/openapi/whm/operation/save_connected_application/) | Manage connections to external applications. |
| `cors-proxy-get` | *Third-Party Services* | *Allow CORS HTTP Requests* | [`cors_proxy_get`](https://api.docs.cpanel.net/openapi/whm/operation/cors_proxy_get/) | Perform Cross-Origin Resource Sharing (CORS) HTTP requests. |
| `cpanel-api` | *Initial Privileges* | *Perform cPanel API and UAPI functions through the WHM API* | N/A | Execute cPanel API 1, cPanel API 2, and UAPI functions via WHM. |
| `cpanel-integration` | *Manage cPanel Integration Links* | *cPanel Integration* | [`create_integration_group`](https://api.docs.cpanel.net/openapi/whm/operation/create_integration_group/)[`create_integration_link`](https://api.docs.cpanel.net/openapi/whm/operation/create_integration_link/)[`get_integration_link_user_config`](https://api.docs.cpanel.net/openapi/whm/operation/get_integration_link_user_config/)[`list_integration_groups`](https://api.docs.cpanel.net/openapi/whm/operation/list_integration_groups/)[`list_integration_links`](https://api.docs.cpanel.net/openapi/whm/operation/list_integration_links/)[`remove_integration_group`](https://api.docs.cpanel.net/openapi/whm/operation/remove_integration_group/)[`remove_integration_link`](https://api.docs.cpanel.net/openapi/whm/operation/remove_integration_link/)[`update_integration_link_token`](https://api.docs.cpanel.net/openapi/whm/operation/update_integration_link_token/) | Manage how a server and its services connect to other servers and services. |
| `create-user-session` | *Initial Privileges* | *Create User Session* | [`create_user_session`](https://api.docs.cpanel.net/openapi/whm/operation/create_user_session/)[`get_users_links`](https://api.docs.cpanel.net/openapi/whm/operation/get_users_links/) | Create a new temporary user session for a specified service. Note: This privilege allows an API token user to bypass any restrictions on the API token. |
| `digest-auth` | *Initial Privileges* | *Digest Authentication* | [`has_digest_auth`](https://api.docs.cpanel.net/openapi/whm/operation/has_digest_auth/)[`set_digest_auth`](https://api.docs.cpanel.net/openapi/whm/operation/set_digest_auth/) | Manage Digest Authentication support. |
| `generate-email-config` | *Initial Privileges* | *Generate Mobile Email Configurations* | [`generate_mobileconfig`](https://api.docs.cpanel.net/openapi/whm/operation/generate_mobileconfig/) | Generate a mobile configuration profile for an email account. |
| `list-pkgs` | *Initial Privileges* | *List Packages* | [`get_feature_metadata`](https://api.docs.cpanel.net/openapi/whm/operation/get_feature_metadata/)[`get_feature_names`](https://api.docs.cpanel.net/openapi/whm/operation/get_feature_names/)[`getpkginfo`](https://api.docs.cpanel.net/openapi/whm/operation/getpkginfo/)[`listpkgs`](https://api.docs.cpanel.net/openapi/whm/operation/listpkgs/)[`matchpkgs`](https://api.docs.cpanel.net/openapi/whm/operation/matchpkgs/) | View existing hosting plans (packages). |
| `manage-api-tokens` | *Initial Privileges* | *Manage API Tokens* | [`accesshash`](https://api.docs.cpanel.net/openapi/whm/operation/accesshash/)[`api_token_create`](https://api.docs.cpanel.net/openapi/whm/operation/api_token_create/)[`api_token_get_details`](https://api.docs.cpanel.net/openapi/whm/operation/api_token_get_details/)[`api_token_list`](https://api.docs.cpanel.net/openapi/whm/operation/api_token_list/)[`api_token_revoke`](https://api.docs.cpanel.net/openapi/whm/operation/api_token_revoke/)[`api_token_update`](https://api.docs.cpanel.net/openapi/whm/operation/api_token_update/)[`get_remote_access_hash`](https://api.docs.cpanel.net/openapi/whm/operation/get_remote_access_hash/) | Manage API tokens. Note: This privilege allows an API token user to bypass any restrictions on the API token. |
| `manage-dns-records` | *Initial Privileges* | *Manage DNS Records* | [`activate_zone_key`](https://api.docs.cpanel.net/openapi/whm/operation/activate_zone_key/)[`add_zone_key`](https://api.docs.cpanel.net/openapi/whm/operation/add_zone_key/)[`addzonerecord`](https://api.docs.cpanel.net/openapi/whm/operation/addzonerecord/)[`deactivate_zone_key`](https://api.docs.cpanel.net/openapi/whm/operation/deactivate_zone_key/)[`disable_dnssec_for_domains`](https://api.docs.cpanel.net/openapi/whm/operation/disable_dnssec_for_domains/)[`dumpzone`](https://api.docs.cpanel.net/openapi/whm/operation/dumpzone/)[`editzonerecord`](https://api.docs.cpanel.net/openapi/whm/operation/editzonerecord/)[`enable_dnssec_for_domains`](https://api.docs.cpanel.net/openapi/whm/operation/enable_dnssec_for_domains/)[`export_zone_dnskey`](https://api.docs.cpanel.net/openapi/whm/operation/export_zone_dnskey/)[`export_zone_files`](https://api.docs.cpanel.net/openapi/whm/operation/export_zone_files/)[`export_zone_key`](https://api.docs.cpanel.net/openapi/whm/operation/export_zone_key/)[`fetch_ds_records_for_domains`](https://api.docs.cpanel.net/openapi/whm/operation/fetch_ds_records_for_domains/)[`getzonerecord`](https://api.docs.cpanel.net/openapi/whm/operation/getzonerecord/)[`import_zone_key`](https://api.docs.cpanel.net/openapi/whm/operation/import_zone_key/)[`listzones`](https://api.docs.cpanel.net/openapi/whm/operation/listzones/)[`parse_dns_zone`](https://api.docs.cpanel.net/openapi/whm/operation/parse_dns_zone/)[`remove_zone_key`](https://api.docs.cpanel.net/openapi/whm/operation/remove_zone_key/)[`removezonerecord`](https://api.docs.cpanel.net/openapi/whm/operation/removezonerecord/)[`resetzone`](https://api.docs.cpanel.net/openapi/whm/operation/resetzone/)[`set_nsec3_for_domains`](https://api.docs.cpanel.net/openapi/whm/operation/set_nsec3_for_domains/)[`unset_nsec3_for_domains`](https://api.docs.cpanel.net/openapi/whm/operation/unset_nsec3_for_domains/) | Manage DNS records. |
| `manage-oidc` | *Initial Privileges* | *Manage OpenID Connect* | [`get_available_authentication_providers`](https://api.docs.cpanel.net/openapi/whm/operation/get_available_authentication_providers/)[`get_users_authn_linked_accounts`](https://api.docs.cpanel.net/openapi/whm/operation/get_users_authn_linked_accounts/)[`link_user_authn_provider`](https://api.docs.cpanel.net/openapi/whm/operation/link_user_authn_provider/)[`unlink_user_authn_provider`](https://api.docs.cpanel.net/openapi/whm/operation/unlink_user_authn_provider/) | Manage external authentication for accounts. |
| `mysql-info` | *Account Management* | *MySQL Information* | [`has_mycnf_for_cpuser`](https://api.docs.cpanel.net/openapi/whm/operation/has_mycnf_for_cpuser/)[`list_mysql_databases_and_users`](https://api.docs.cpanel.net/openapi/whm/operation/list_mysql_databases_and_users/) | Retrieve MySQL® database and user data. |
| `ns-config` | *Initial Privileges* | *Nameserver Configuration* | [`get_nameserver_config`](https://api.docs.cpanel.net/openapi/whm/operation/get_nameserver_config/)[`getresellerips`](https://api.docs.cpanel.net/openapi/whm/operation/getresellerips/)[`lookupnsip`](https://api.docs.cpanel.net/openapi/whm/operation/lookupnsip/)[`lookupnsips`](https://api.docs.cpanel.net/openapi/whm/operation/lookupnsips/)[`resolvedomainname`](https://api.docs.cpanel.net/openapi/whm/operation/resolvedomainname/)[`setresellernameservers`](https://api.docs.cpanel.net/openapi/whm/operation/setresellernameservers/) | Manage nameserver records. |
| `public-contact` | *Initial Privileges* | *Public Contact Information* | [`get_public_contact`](https://api.docs.cpanel.net/openapi/whm/operation/get_public_contact/)[`set_public_contact`](https://api.docs.cpanel.net/openapi/whm/operation/set_public_contact/) | Retrieve or set the public contact information for cPanel accounts. |
| `ssl-info` | *Initial Privileges* | *SSL Information* | [`fetch_ssl_vhosts`](https://api.docs.cpanel.net/openapi/whm/operation/fetch_ssl_vhosts/)[`fetch_vhost_ssl_components`](https://api.docs.cpanel.net/openapi/whm/operation/fetch_vhost_ssl_components/)[`fetchcrtinfo`](https://api.docs.cpanel.net/openapi/whm/operation/fetchcrtinfo/)[`get_best_ssldomain_for_service`](https://api.docs.cpanel.net/openapi/whm/operation/get_best_ssldomain_for_service/)[`listcrts`](https://api.docs.cpanel.net/openapi/whm/operation/listcrts/) | View SSL information. |
| `track-email` | *Initial Privileges* | *Track Email* | [`emailtrack_search`](https://api.docs.cpanel.net/openapi/whm/operation/emailtrack_search/)[`emailtrack_stats`](https://api.docs.cpanel.net/openapi/whm/operation/emailtrack_stats/)[`emailtrack_user_stats`](https://api.docs.cpanel.net/openapi/whm/operation/emailtrack_user_stats/) | Retrieve email delivery records. |


### Standard privileges

The following table lists the ACLs for standard privileges and the API functions that use these ACLs:

| ACL | Privilege type | Feature limit | Associated WHM API 1 functions | Description |
|  --- | --- | --- | --- | --- |
| `list-accts` | *Account Information* | *List Accounts* | [`get_current_users_count`](https://api.docs.cpanel.net/openapi/whm/operation/get_current_users_count/)[`get_disk_usage`](https://api.docs.cpanel.net/openapi/whm/operation/get_disk_usage/)[`getdomainowner`](https://api.docs.cpanel.net/openapi/whm/operation/getdomainowner/)[`get_maximum_users`](https://api.docs.cpanel.net/openapi/whm/operation/get_maximum_users/)[`listaccts`](https://api.docs.cpanel.net/openapi/whm/operation/listaccts/)[`list_users`](https://api.docs.cpanel.net/openapi/whm/operation/list_users/)[`uapi_cpanel`](https://api.docs.cpanel.net/openapi/whm/operation/uapi_cpanel/) | View the list of accounts on a server. |
| `show-bandwidth` | *Account Information* | *View Account Bandwidth Usage* | [`showbw`](https://api.docs.cpanel.net/openapi/whm/operation/showbw/) | View bandwidth usage statistics. |
| `create-acct` | *Account Management* | *Create Accounts* | [`_getpkgextensionform`](https://api.docs.cpanel.net/openapi/whm/operation/_getpkgextensionform/)[`createacct`](https://api.docs.cpanel.net/openapi/whm/operation/createacct/)[`get_password_strength`](https://api.docs.cpanel.net/openapi/whm/operation/get_password_strength/)[`twofactorauth_generate_tfa_config`](https://api.docs.cpanel.net/openapi/whm/operation/twofactorauth_generate_tfa_config/)[`twofactorauth_get_issuer`](https://api.docs.cpanel.net/openapi/whm/operation/twofactorauth_get_issuer/)[`twofactorauth_get_user_configs`](https://api.docs.cpanel.net/openapi/whm/operation/twofactorauth_get_user_configs/)[`twofactorauth_policy_status`](https://api.docs.cpanel.net/openapi/whm/operation/twofactorauth_policy_status/)[`twofactorauth_remove_user_config`](https://api.docs.cpanel.net/openapi/whm/operation/twofactorauth_remove_user_config/)[`twofactorauth_set_issuer`](https://api.docs.cpanel.net/openapi/whm/operation/twofactorauth_set_issuer/)[`twofactorauth_set_tfa_config`](https://api.docs.cpanel.net/openapi/whm/operation/twofactorauth_set_tfa_config/)[`verify_new_username`](https://api.docs.cpanel.net/openapi/whm/operation/verify_new_username/)[`verify_new_username_for_restore`](https://api.docs.cpanel.net/openapi/whm/operation/verify_new_username_for_restore/)[`verify_user_has_feature`](https://api.docs.cpanel.net/openapi/whm/operation/verify_user_has_feature/) | Create cPanel accounts and set up 2FA (Two-Factor Authentication) on them. |
| `kill-acct` | *Account Management* | *Terminate Accounts* | [`removeacct`](https://api.docs.cpanel.net/openapi/whm/operation/removeacct/) | Delete cPanel accounts. |
| `suspend-acct` | *Account Management* | *Suspend/Unsuspend Accounts* | [`hold_outgoing_email`](https://api.docs.cpanel.net/openapi/whm/operation/hold_outgoing_email/)[`listsuspended`](https://api.docs.cpanel.net/openapi/whm/operation/listsuspended/)[`release_outgoing_email`](https://api.docs.cpanel.net/openapi/whm/operation/release_outgoing_email/)[`suspendacct`](https://api.docs.cpanel.net/openapi/whm/operation/suspendacct/)[`suspend_outgoing_email`](https://api.docs.cpanel.net/openapi/whm/operation/suspend_outgoing_email/)[`unsuspendacct`](https://api.docs.cpanel.net/openapi/whm/operation/unsuspendacct/)[`unsuspend_outgoing_email`](https://api.docs.cpanel.net/openapi/whm/operation/unsuspend_outgoing_email/) | Suspend and unsuspend cPanel accounts. |
| `upgrade-account` | *Account Management* | *Upgrade/Downgrade Accounts* | [`changepackage`](https://api.docs.cpanel.net/openapi/whm/operation/changepackage/) | Modify an account's hosting plan (package). |
| `ssl` | *Account Management* | *SSL Site Management* | [`delete_ssl_vhost`](https://api.docs.cpanel.net/openapi/whm/operation/delete_ssl_vhost/)[`enqueue_deferred_ssl_installations`](https://api.docs.cpanel.net/openapi/whm/operation/enqueue_deferred_ssl_installations/)[`fetch_ssl_certificates_for_fqdns`](https://api.docs.cpanel.net/openapi/whm/operation/fetch_ssl_certificates_for_fqdns/)[`fetchsslinfo`](https://api.docs.cpanel.net/openapi/whm/operation/fetchsslinfo/)[`generatessl`](https://api.docs.cpanel.net/openapi/whm/operation/generatessl/)[`installssl`](https://api.docs.cpanel.net/openapi/whm/operation/installssl/)[`rebuild_mail_sni_config`](https://api.docs.cpanel.net/openapi/whm/operation/rebuild_mail_sni_config/)[`rebuilduserssldb`](https://api.docs.cpanel.net/openapi/whm/operation/rebuilduserssldb/)[`set_primary_servername`](https://api.docs.cpanel.net/openapi/whm/operation/set_primary_servername/) | Modify SSL information for cPanel accounts. |
| `ssl-buy` | *Account Management* | *Purchase SSL Certificates* | N/A | Purchase SSL certificates. |
| `ssl-gencrt` | *Account Management* | *SSL CSR/Certificate Generator* | [`generatessl`](https://api.docs.cpanel.net/openapi/whm/operation/generatessl/) | Generate CSRs and SSL certificates. |
| `edit-mx` | *Account Management* | *Edit MX Entries* | [`listmxs`](https://api.docs.cpanel.net/openapi/whm/operation/listmxs/)[`savemxs`](https://api.docs.cpanel.net/openapi/whm/operation/savemxs/) | Modify MX entries. |
| `passwd` | *Account Management* | *Change Passwords* | [`forcepasswordchange`](https://api.docs.cpanel.net/openapi/whm/operation/forcepasswordchange/)[`get_password_strength`](https://api.docs.cpanel.net/openapi/whm/operation/get_password_strength/)[`passwd`](https://api.docs.cpanel.net/openapi/whm/operation/passwd) | This privilege allows a reseller to change account passwords and allow users to log in without an API token. |
| `file-restore` | *Account Management* | *File and Directory Restoration* | N/A | Restore items from local backup sources. |
| `create-dns` | *DNS* | *Add DNS Zones* | [`adddns`](https://api.docs.cpanel.net/openapi/whm/operation/adddns/) | Add DNS zones. |
| `kill-dns` | *DNS* | *Remove DNS Zones* | [`killdns`](https://api.docs.cpanel.net/openapi/whm/operation/killdns/) | Delete DNS zones. |
| `park-dns` | *DNS* | *Park DNS Zones* | [`create_parked_domain_for_user`](https://api.docs.cpanel.net/openapi/whm/operation/create_parked_domain_for_user/) | Park DNS zones. |
| `edit-dns` | *DNS* | *Edit DNS Zones* | [`mass_edit_dns_zone`](https://api.docs.cpanel.net/openapi/whm/operation/mass_edit_dns_zone/) | Edit DNS zones. |
| `add-pkg` | *Packages* | *Add/Remove Packages* | [`addpkg`](https://api.docs.cpanel.net/openapi/whm/operation/addpkg/)[`create_featurelist`](https://api.docs.cpanel.net/openapi/whm/operation/create_featurelist/)[`delete_featurelist`](https://api.docs.cpanel.net/openapi/whm/operation/delete_featurelist/)[`get_featurelist_data`](https://api.docs.cpanel.net/openapi/whm/operation/get_featurelist_data/)[`get_featurelists`](https://api.docs.cpanel.net/openapi/whm/operation/get_featurelists/)[`killpkg`](https://api.docs.cpanel.net/openapi/whm/operation/killpkg/)[`update_featurelist`](https://api.docs.cpanel.net/openapi/whm/operation/update_featurelist/) | Create or delete hosting plans (packages). |
| `edit-pkg` | *Packages* | *Edit Packages* | [`addpkgext`](https://api.docs.cpanel.net/openapi/whm/operation/addpkgext/)[`delpkgext`](https://api.docs.cpanel.net/openapi/whm/operation/delpkgext/)[`editpkg`](https://api.docs.cpanel.net/openapi/whm/operation/editpkg/) | Modify existing hosting plans (packages). |
| `thirdparty` | *Third-Party Services* | *Manage Third-Party Services* | N/A | Manage third-party services (for example, plugins or cPAddons). |
| `mailcheck` | *Troubleshooting* | *Troubleshoot Mail Delivery* | N/A | Access WHM's [*Mail Troubleshooter*](https://docs.cpanel.net/whm/email/mail-troubleshooter/) interface (*WHM >> Home >> Email >> Mail Troubleshooter*). |
| `news` | *cPanel Management* | *News Modification* | N/A | Modify news in WHM's [*Modify cPanel & WHM News*](https://docs.cpanel.net/whm/cpanel/modify-cpanel-whm-news/) interface (*WHM >> Home >> cPanel >> Modify cPanel & WHM News*). |
| `assign-root-account-enhancements` | *Package Access* | *Use Root Account Enhancements* | [`assign_account_enhancement`](https://api.docs.cpanel.net/openapi/whm/operation/assign_account_enhancement/)[`list_account_enhancements`](https://api.docs.cpanel.net/openapi/whm/operation/list_account_enhancements/)[`unassign_account_enhancement`](https://api.docs.cpanel.net/openapi/whm/operation/unassign_account_enhancement/) | Allow the reseller to assign, list, or unassign [Account Enhancements](https://go.cpanel.net/account-enhancements) on their cPanel account. |


### Package privileges

The following table lists the ACLs for package privileges and the API functions that use these ACLs:

| ACL name | Privilege type | Feature limit | Associated WHM API 1 functions | Description |
|  --- | --- | --- | --- | --- |
| `allow-shell` | *Accounts* | *Allow Creation of Accounts with Shell Access* | N/A | Allow account creation with shell access. |
| `viewglobalpackages` | *Package Access* | *Use Root Packages* | [`addpkg`](https://api.docs.cpanel.net/openapi/whm/operation/addpkg/)[`editpkg`](https://api.docs.cpanel.net/openapi/whm/operation/editpkg/) | Allow the reseller to use all global packages. For more information, read our [reseller packages](https://docs.cpanel.net/knowledge-base/accounts/guide-to-reseller-accounts/#which-packages-can-resellers-view-and-assign) documentation. |
| `allow-addoncreate` | *Package Creation* | *Create Packages with Addon Domains* | [`addpkg`](https://api.docs.cpanel.net/openapi/whm/operation/addpkg/)[`editpkg`](https://api.docs.cpanel.net/openapi/whm/operation/editpkg/) | Create hosting plans (packages) that include addon domains. |
| `allow-parkedcreate` | *Package Creation* | *Create Packages with Parked (Alias) Domains* | [`addpkg`](https://api.docs.cpanel.net/openapi/whm/operation/addpkg/)[`editpkg`](https://api.docs.cpanel.net/openapi/whm/operation/editpkg/) | Create hosting plans (packages) that include parked domains (aliases). |
| `add-pkg-ip` | *Package Creation* | *Create Packages with a Dedicated IP Address* | [`addpkg`](https://api.docs.cpanel.net/openapi/whm/operation/addpkg/)[`editpkg`](https://api.docs.cpanel.net/openapi/whm/operation/editpkg/) | Create hosting plans (packages) that include a dedicated IP address. |
| `add-pkg-shell` | *Package Creation* | *Create Packages with Shell Access* | [`addpkg`](https://api.docs.cpanel.net/openapi/whm/operation/addpkg/)[`editpkg`](https://api.docs.cpanel.net/openapi/whm/operation/editpkg/) | Create hosting plans (packages) that grant shell access. |
| `allow-unlimited-pkgs` | *Package Creation* | *Create Packages with Unlimited Features* | [`addpkg`](https://api.docs.cpanel.net/openapi/whm/operation/addpkg/)[`editpkg`](https://api.docs.cpanel.net/openapi/whm/operation/editpkg/) | Set an unlimited quota on one or more package settings. |
| `allow-emaillimits-pkgs` | *Package Creation* | *Create Packages with Custom Email Limits* | [`addpkg`](https://api.docs.cpanel.net/openapi/whm/operation/addpkg/)[`editpkg`](https://api.docs.cpanel.net/openapi/whm/operation/editpkg/) | Create hosting plans (packages) with email quotas that are not the default quotas. |
| `allow-unlimited-disk-pkgs` | *Package Creation* | *Create Packages with Unlimited Disk Usage* | [`addpkg`](https://api.docs.cpanel.net/openapi/whm/operation/addpkg/)[`editpkg`](https://api.docs.cpanel.net/openapi/whm/operation/editpkg/) | Create packages with an unlimited disk quota. |
| `allow-unlimited-bw-pkgs` | *Package Creation* | *Create Packages with Unlimited Bandwidth* | [`addpkg`](https://api.docs.cpanel.net/openapi/whm/operation/addpkg/)[`editpkg`](https://api.docs.cpanel.net/openapi/whm/operation/editpkg/) | Create packages with unlimited bandwidth. |


### Additional software

The following table lists the ACLs for additional software and the API functions that use these ACLs:

| ACL name | Privilege type | Feature limit | Associated API functions | Description |
|  --- | --- | --- | --- | --- |
| `software-imunify360` | *Additional Software* | *Third-Party Services* | N/A | Access Imunify360 plugin. |
| `wp-toolkit` | *Additional Software* | *WP Toolkit* | N/A | Access WP Toolkit. |


### Global privileges

The following table lists the ACLs for global privileges and the API functions that use these ACLs:

| ACL name | Privilege type | Feature limit | Associated API functions | Description |
|  --- | --- | --- | --- | --- |
| `status` | *Server Information* | *View Server Status* | [`servicestatus`](https://api.docs.cpanel.net/openapi/whm/operation/servicestatus/) | View the interfaces in WHM's Server Status section (*WHM >> Home >> Server Status*). |
| `stats` | *Server Information* | *View Server Information* | [`installed_versions`](https://api.docs.cpanel.net/openapi/whm/operation/installed_versions/) | View WHM's [*Server Information*](https://docs.cpanel.net/whm/server-status/server-information/) interface (*WHM >> Home >> Server Status >> Server Information*). |
| `restart` | *Services* | *Restart Services* | [`restartservice`](https://api.docs.cpanel.net/openapi/whm/operation/restartservice/) | Restart services on the server. |
| `resftp` | *Troubleshooting* | *Resynchronize FTP Passwords* | N/A | Access WHM's *Synchronize FTP Passwords* interface (*WHM >> Home >> cPanel >> Synchronize FTP Passwords*). |


### Super privileges

The following table lists the ACLs for super privileges and the API functions that use these ACLs:

| ACL name | Privilege type | Feature limit | Associated WHM API 1 functions | Description |
|  --- | --- | --- | --- | --- |
| `edit-account` | *Account Management* | *Account Modification* | [`add_override_features_for_user`](https://api.docs.cpanel.net/openapi/whm/operation/add_override_features_for_user/)[`massmodifyacct`](https://api.docs.cpanel.net/openapi/whm/operation/massmodifyacct/)[`modifyacct`](https://api.docs.cpanel.net/openapi/whm/operation/modifyacct/)[`remove_override_features_for_user`](https://api.docs.cpanel.net/openapi/whm/operation/remove_override_features_for_user/) | Modify accounts. |
| `limit-bandwidth` | *Account Management* | *Bandwidth Limit Modification* | [`limitbw`](https://api.docs.cpanel.net/openapi/whm/operation/limitbw/) | Modify account bandwidth limits. |
| `quota` | *Account Management* | *Quota Modification* | [`editquota`](https://api.docs.cpanel.net/openapi/whm/operation/editquota/) | Modify account quotas. |
| `demo-setup` | *Account Management* | *Set an Account to be a Demo Account* | N/A | Enable demo mode for an account. |
| `rearrange-accts` | *Advanced Account Management* | *Rearrange Accounts* | [`abort_transfer_session`](https://api.docs.cpanel.net/openapi/whm/operation/abort_transfer_session/)[`convert_addon_fetch_conversion_details`](https://api.docs.cpanel.net/openapi/whm/operation/convert_addon_fetch_conversion_details/)[`convert_addon_fetch_domain_details`](https://api.docs.cpanel.net/openapi/whm/operation/convert_addon_fetch_domain_details/)[`convert_addon_get_conversion_status`](https://api.docs.cpanel.net/openapi/whm/operation/convert_addon_get_conversion_status/)[`convert_addon_initiate_conversion`](https://api.docs.cpanel.net/openapi/whm/operation/convert_addon_initiate_conversion/)[`convert_addon_list_addon_domains`](https://api.docs.cpanel.net/openapi/whm/operation/convert_addon_list_addon_domains/)[`convert_addon_list_conversions`](https://api.docs.cpanel.net/openapi/whm/operation/convert_addon_list_conversions/)[`enqueue_transfer_item`](https://api.docs.cpanel.net/openapi/whm/operation/enqueue_transfer_item/)[`fetch_transfer_session_log`](https://api.docs.cpanel.net/openapi/whm/operation/fetch_transfer_session_log/)[`get_transfer_session_state`](https://api.docs.cpanel.net/openapi/whm/operation/get_transfer_session_state/)[`pause_transfer_session`](https://api.docs.cpanel.net/openapi/whm/operation/pause_transfer_session/)[`start_transfer_session`](https://api.docs.cpanel.net/openapi/whm/operation/start_transfer_session/)[`transfer_module_schema`](https://api.docs.cpanel.net/openapi/whm/operation/transfer_module_schema/) | Rearrange accounts on the server to increase available disk space. |
| `clustering` | *Clustering* | *DNS Clustering* | [`add_configclusterserver`](https://api.docs.cpanel.net/openapi/whm/operation/add_configclusterserver/)[`batch`](https://api.docs.cpanel.net/openapi/whm/operation/batch/)[`cluster_member_has_trust_with`](https://api.docs.cpanel.net/openapi/whm/operation/cluster_member_has_trust_with/)[`configureservice`](https://api.docs.cpanel.net/openapi/whm/operation/configureservice/)[`gethostname`](https://api.docs.cpanel.net/openapi/whm/operation/gethostname/)[`installed_versions`](https://api.docs.cpanel.net/openapi/whm/operation/installed_versions/)[`list_configclusterservers`](https://api.docs.cpanel.net/openapi/whm/operation/list_configclusterservers/)[`restartservice`](https://api.docs.cpanel.net/openapi/whm/operation/restartservice/)[`servicestatus`](https://api.docs.cpanel.net/openapi/whm/operation/servicestatus/)[`set_nameserver`](https://api.docs.cpanel.net/openapi/whm/operation/set_nameserver/)[`version`](https://api.docs.cpanel.net/openapi/whm/operation/version/) | Configure DNS clusters. |
| `locale-edit` | *Locales* | *Modify & Create Locales* | N/A | Create and modify locales on the server. |


### root privileges

The following table lists the ACLs for `root` privileges and the API functions that use these ACLs:

| ACL | Privilege type | Feature limit | Associated WHM API 1 functions | Description |
|  --- | --- | --- | --- | --- |
| `all` | *Everything* | *All Features* | All WHM API 1 functions. | The reseller possesses `root`-level privileges on the server and can execute all WHM API 1 functions. |