Development Guides Home >> Guide to WHM Plugins

Guide to WHM Plugins - ACL Reference Chart

Introduction

cPanel & WHM ships with a default list of Access Control Lists (ACLs) and privileges. You can assign ACLs and privileges to WHM users in WHM's Edit Reseller Nameservers and Privileges interface (WHM >> Home >> Resellers >> Edit Reseller Nameservers and Privileges).

Available ACLs

Note:

In the tables below, the Feature limit column lists the privilege's name in WHM's Edit Reseller Nameservers and Privileges interface (WHM >> Home >> Resellers >> Edit Reseller Nameservers and Privileges).

root privileges

ACL Privilege type Feature limit Associated WHM API 1 functions Description
all Everything All Features All WHM API 1 functions. The user possesses root-level privileges on the server.

Standard privileges

ACL Privilege type Feature limit Associated WHM API 1 functions Description
list-accts Account Information List Accounts listaccts View the list of accounts on a server.
show-bandwidth Account Information View Account Bandwidth Usage showbw View bandwidth usage statistics.
acct-summary Account Information Account Summary View an account's summary.
basic-whm-functions Account Information Basic WHM Functions Access basic cPanel & WHM options.
create-acct Account Management Create Accounts Create cPanel accounts.
kill-acct Account Management Terminate Accounts removeacct Delete the cPanel accounts.
suspend-acct Account Management Suspend/Unsuspend Accounts suspendacct Suspend and unsuspend cPanel accounts.
upgrade-account Account Management Upgrade/Downgrade Accounts changepackage Modify an account's hosting plan (package).
ssl Account Management SSL Site Management Modify SSL information for cPanel accounts.
ssl-buy Account Management Purchase SSL Certificates N/A Purchase SSL certificates.
ssl-gencrt Account Management SSL CSR/Certificate Generator generatessl Generate CSRs and SSL certificates.
edit-mx Account Management Edit MX Entries Modify MX entries.
passwd Account Management Change Passwords This privilege allows a reseller to change account passwords and allow users to log in without an API token.
create-user-session Account Management Create User Session Create a new temporary user session for a specified service.
This privilege allows an API token user to bypass any restrictions on the API token.
digest-auth Account Management Digest Authentication Manage Digest Authentication support.
generate-email-config Account Management Generate Mobile Email Configuration generate_mobileconfig Generate a mobile configuration profile for an email account.
manage-oidc Account Management Manage OpenID Connect Manage external authentication for an accounts.
manage-styles Account Management Manage Styles Manage an accounts' cPanel styles.
mysql-info Account Management MySQL Information Retrieve MySQL® database and user data.
ssl-info Account Management SSL Information View SSL information.
manage-api-tokens Account Management Manage API Tokens. Manage API tokens.
This privilege allows an API token user to bypass any restrictions on the API token.
create-dns DNS Add DNS Zones adddns Add DNS zones.
kill-dns DNS Remove DNS Zones killdns Delete DNS zones.
park-dns DNS Park DNS Zones N/A Park DNS zones.
edit-dns DNS Edit DNS Zones N/A Edit DNS zones.
manage-dns-records DNS Manage DNS Records Manage DNS records.
ns-config DNS Nameserver Configuration Manage nameserver records.
add-pkg Packages Add/Remove Packages addpkg Create or delete hosting plans (packages).
edit-pkg Packages Edit Packages editpkg Modify existing hosting plans (packages).
list-pkgs Packages List Packages View existing hosting plans (packages).
thirdparty Third-Party Services Manage Third-Party Services N/A Manage third-party services (for example, plugins or cPAddons).
cors-proxy-get Third-Party Services Allow CORS Proxy Requests cors_proxy_get Perform Cross-Origin Resource Sharing (CORS) HTTP requests.
mailcheck Troubleshooting Troubleshoot Mail Delivery N/A Access WHM's Mail Troubleshooter interface (WHM >> Home >> Email >> Mail Troubleshooter).
track-email Troubleshooting Track Email Retrieve email delivery records.
news cPanel Management News Modification N/A Modify news in WHM's Modify cPanel & WHM News interface (WHM >> Home >> cPanel >> Modify cPanel & WHM News).
basic-system-info cPanel Management Basic System Information Retrieve basic system information.
cpanel-integration Manage cPanel Integration Links cPanel Integration Manage how a server and and its services connect to other servers and services.

Package privileges

ACL Privilege type Feature limit Associated WHM API 1 functions Description
allow-shell Accounts Allow Creation of Accounts with Shell Access N/A Allow account creation with shell access.
viewglobalpackages Package Access Use Root Packages Allow the reseller to use all global packages. For more information, read our reseller packages documentation.
assign-root-account-enhancements Package Access Use Root Account Enhancements Allow the reseller to assign or unassign Account Enhancements to their cPanel account.
allow-addoncreate Packages Creation Create Packages with Addon Domains Create hosting plans (packages) that include addon domains.
allow-parkedcreate Packages Creation Create Packages with Parked (Alias) Domains Create hosting plans (packages) that include parked domains (aliases).
add-pkg-ip Packages Creation Create Packages with a Dedicated IP Address Create hosting plans (packages) that include a dedicated IP address.
add-pkg-shell Packages Creation Create Packages with Shell Access Create hosting plans (packages) that grant shell access.
allow-unlimited-pkgs Packages Creation Create Packages with Unlimited Features Set an unlimited quota on one or more package settings.
allow-emaillimits-pkgs Packages Creation Create Packages with Custom Email Limits Create hosting plans (packages) with email quotas that are not the default quotas.
allow-unlimited-disk-pkgs Packages Creation Create Packages with Unlimited Disk Usage Create packages with an unlimited disk quota.
allow-unlimited-bw-pkgs Packages Creation Create Packages with Unlimited Bandwidth Create packages with unlimited bandwidth.

Global privileges

ACL Privilege type Feature limit Associated API functions Description
status Server Information View Server Status configureservice View the interfaces in WHM's Server Status section (WHM >> Home >> Server Status).
stats Server Information View Server Information N/A View WHM's Server Information interface (WHM >> Home >> Server Status >> Server Information).
restart Services Restart Services restartservice Restart services on the server.
restart Troubleshooting Resync FTP Passwords restartservice Access WHM's Synchronize FTP Passwords interface (WHM >> Home >> cPanel >> Synchronize FTP Passwords).

Super privileges

ACL Privilege type Feature limit Associated WHM API 1 functions Description
edit-account Account Management Account Modification modifyacct Modify accounts.
quota Account Management Quota Modification editquota Modify account quotas.
demo-setup Account Management Set an Account to be a Demo Account. N/A Enable demo mode for an account.
limit-bandwidth Account Management Bandwidth Limiting Modification N/A Modify account bandwidth limits.
rearrange-accts Advanced Account Management Rearrange Accounts Rearrange accounts on the server in order to increase available disk space.
clustering Clustering DNS Clustering Configure DNS clusters.
locale-edit Locales Modify & Create Locales N/A Create and modify locales on the server.