Create or update privilege list and settings

This function creates or modifies an Access Control List (ACL).

Note:

For each acl-* parameter, a value of 1 adds that privilege to the ACL list and a value of 0 removes that privilege from the ACL list.

Warning:

We strongly recommend that WHM users create and edit ACLs and ACL privileges through WHM's Edit Reseller Nameservers and Privileges interface ( WHM >> Home >> Resellers >> Edit Reseller Nameservers and Privileges ).

Authorizations:
query Parameters
acllist
required
string

The ACL to assign to the reseller.

Note:

To modify an existing ACL, set this value to that ACL's name.

Example: acllist=my_acl_list
acl-acct-summary
integer
Default: 0

Whether to allow the reseller to view an account summary.

Enum: 0 1
Example: acl-acct-summary=1
acl-add-pkg
integer
Default: 0

Whether to allow the reseller to add and remove hosting plans (packages).

Enum: 0 1
Example: acl-add-pkg=1
acl-add-pkg-ip
integer
Default: 0

Whether to allow the reseller to create packages with a dedicated IP address.

Enum: 0 1
Example: acl-add-pkg-ip=1
acl-add-pkg-shell
integer
Default: 0

Whether to allow the reseller to create packages with shell access.

Enum: 0 1
Example: acl-add-pkg-shell=1
acl-all
integer
Default: 0

Whether to grant the reseller all privileges.

Warning:

A value of 1 grants root-level privileges to the reseller.

Enum: 0 1
Example: acl-all=1
acl-allow-addoncreate
integer
Default: 0

Whether to allow the reseller to create packages with addon domains.

Enum: 0 1
Example: acl-allow-addoncreate=1
acl-allow-emaillimits-pkgs
integer
Default: 0

Whether to allow the reseller to create packages with custom email quotas.

Enum: 0 1
Example: acl-allow-emaillimits-pkgs=1
acl-allow-parkedcreate
integer
Default: 0

Whether to allow the reseller to create packages with parked domains (aliases).

Enum: 0 1
Example: acl-allow-parkedcreate=1
acl-allow-shell
integer
Default: 0

Whether to allow the reseller to create accounts with shell access.

Enum: 0 1
Example: acl-allow-shell=1
acl-allow-unlimited-bw-pkgs
integer
Default: 0

Whether to allow the reseller to create packages with unlimited bandwidth.

Enum: 0 1
Example: acl-allow-unlimited-bw-pkgs=1
acl-allow-unlimited-disk-pkgs
integer
Default: 0

Whether to allow the reseller to create packages with unlimited disk space.

Enum: 0 1
Example: acl-allow-unlimited-disk-pkgs=1
acl-allow-unlimited-pkgs
integer
Default: 0

Whether to allow the reseller to create packages with unlimited features.

Enum: 0 1
Example: acl-allow-unlimited-pkgs=1
acl-basic-system-info
integer
Default: 0

Whether to allow the reseller to retrieve basic system information.

Enum: 0 1
Example: acl-basic-system-info=1
acl-basic-whm-functions
integer
Default: 0

Whether to allow the reseller to access basic cPanel & WHM options.

Enum: 0 1
Example: acl-basic-whm-functions=1
acl-clustering
integer
Default: 0

Whether to allow the reseller to use DNS clusters.

Enum: 0 1
Example: acl-clustering=1
acl-cors-proxy-get
integer
Default: 0

Whether to allow the reseller to perform Cross-Origin Resource Sharing (CORS) HTTP requests.

Enum: 0 1
Example: acl-cors-proxy-get=1
acl-cpanel-api
integer
Default: 0

Whether to allow the reseller to execute cPanel API 1, cPanel API 2 and UAPI functions via WHM.

Enum: 0 1
Example: acl-cpanel-api=1
acl-cpanel-integration
integer
Default: 0

Whether to allow the reseller to manage how their server and its services connect to other servers and services.

Enum: 0 1
Example: acl-cpanel-integration=1
acl-create-acct
integer
Default: 0

Whether to allow the reseller to create accounts.

Enum: 0 1
Example: acl-create-acct=1
acl-create-dns
integer
Default: 0

Whether to allow the reseller to add DNS zones.

Enum: 0 1
Example: acl-create-dns=1
acl-create-user-session
integer
Default: 0

Whether to allow the reseller to create a temporary user session for a specified service.

Notes:

This privilege allows an API token user to bypass any restrictions that you set on the API token. For more information, read our Manage API Tokens documentation.

Enum: 0 1
Example: acl-create-user-session=1
acl-demo-setup
integer
Default: 0

Whether to allow the reseller to enable demo mode for accounts.

Enum: 0 1
Example: acl-demo-setup=1
acl-digest-auth
integer
Default: 0

Whether to allow the reseller to manage Digest Authentication support.

Enum: 0 1
Example: acl-digest-auth=1
acl-edit-account
integer
Default: 0

Whether to allow the reseller to edit accounts.

Enum: 0 1
Example: acl-edit-account=1
acl-edit-dns
integer
Default: 0

Whether to allow the reseller to edit DNS zones.

Enum: 0 1
Example: acl-edit-dns=1
acl-edit-mx
integer
Default: 0

Whether to allow the reseller to edit MX entries.

Enum: 0 1
Example: acl-edit-mx=1
acl-edit-pkg
integer
Default: 0

Whether to allow the reseller to edit hosting plans (packages).

Enum: 0 1
Example: acl-edit-pkg=1
acl-generate-email-config
integer
Default: 0

Whether to allow the reseller to generate a mobile configuration profile for an email account.

Enum: 0 1
Example: acl-generate-email-config=1
acl-kill-acct
integer
Default: 0

Whether to allow the reseller to terminate accounts.

Enum: 0 1
Example: acl-kill-acct=1
acl-kill-dns
integer
Default: 0

Whether to allow the reseller to remove DNS zones.

Enum: 0 1
Example: acl-kill-dns=1
acl-limit-bandwidth
integer
Default: 0

Whether to allow the reseller to modify bandwidth limits (quotas).

Warning:

If you do not use resource limits, a value of 1 allows resellers to circumvent package limits for disk space.

Enum: 0 1
Example: acl-limit-bandwidth=1
acl-list-accts
integer
Default: 0

Whether to allow the reseller to view the list of accounts.

Enum: 0 1
Example: acl-list-accts=1
acl-list-pkgs
integer
Default: 0

Whether to allow the reseller to view existing hosting plans (packages).

Enum: 0 1
Example: acl-list-pkgs=1
acl-locale-edit
integer
Default: 0

Whether to allow the reseller to create and modify locales on the server.

Enum: 0 1
Example: acl-locale-edit=1
acl-mailcheck
integer
Default: 0

Whether to allow the reseller to troubleshoot mail delivery.

Enum: 0 1
Example: acl-mailcheck=1
acl-manage-api-tokens
integer
Default: 0

Whether to allow the reseller to manage API tokens.

Notes:

This privilege allows an API token user to bypass any restrictions that you set on the API token. For more information, read our Manage API Tokens documentation.

Enum: 0 1
Example: acl-manage-api-tokens=1
acl-manage-dns-records
integer
Default: 0

Whether to allow the reseller to manage DNS records.

Enum: 0 1
Example: acl-manage-dns-records=1
acl-manage-oidc
integer
Default: 0

Whether to allow the reseller to manage external authentication for their accounts.

Enum: 0 1
Example: acl-manage-oidc=1
acl-manage-styles
integer
Default: 0

Whether to allow the reseller to manage their server's cPanel styles.

Enum: 0 1
Example: acl-manage-styles=1
acl-mysql-info
integer
Default: 0

Whether to allow the reseller to retrieve MySQL® database and user data.

Enum: 0 1
Example: acl-mysql-info=1
acl-news
integer
Default: 0

Whether to allow the reseller to modify the server's news.

Enum: 0 1
Example: acl-news=1
acl-ns-config
integer
Default: 0

Whether to allow the reseller to manage nameservers.

Enum: 0 1
Example: acl-ns-config=1
acl-park-dns
integer
Default: 0

Whether to allow the reseller to park DNS zones.

Enum: 0 1
Example: acl-park-dns=1
acl-passwd
integer
Default: 0

Whether to allow the reseller to change passwords.

Note:

This privilege allows an API token user to change account passwords and log in with a new password. For more information, read our Manage API Tokens documentation.

Enum: 0 1
Example: acl-passwd=1
acl-quota
integer
Default: 0

Whether to allow the reseller to modify quotas.

Warning:

If you do not use resource limits, this privilege allows resellers to circumvent package limits for disk space.

Enum: 0 1
Example: acl-quota=1
acl-rearrange-accts
integer
Default: 0

Whether to allow the reseller to rearrange accounts.

Enum: 0 1
Example: acl-rearrange-accts=1
acl-resftp
integer
Default: 0

Whether to allow the reseller to resync FTP passwords.

Enum: 0 1
Example: acl-resftp=1
acl-restart
integer
Default: 0

Whether to allow the reseller to restart services.

Enum: 0 1
Example: acl-restart=1
acl-show-bandwidth
integer
Default: 0

Whether to allow the reseller to view account bandwidth usage.

Enum: 0 1
Example: acl-show-bandwidth=1
acl-ssl
integer
Default: 0

Whether to allow the reseller to perform SSL site management.

Enum: 0 1
Example: acl-ssl=1
acl-ssl-buy
integer
Default: 0

Whether to allow the reseller to purchase SSL certificates.

Enum: 0 1
Example: acl-ssl-buy=1
acl-ssl-gencrt
integer
Default: 0

Whether to allow the reseller to generate SSL certificates.

Enum: 0 1
Example: acl-ssl-gencrt=1
acl-ssl-info
integer
Default: 0

Whether to allow the reseller to view their server's SSL information.

Enum: 0 1
Example: acl-ssl-info=1
acl-stats
integer
Default: 0

Whether to allow the reseller to view server information.

Enum: 0 1
Example: acl-stats=1
acl-status
integer
Default: 0

Whether to allow the reseller to view the server's status.

Enum: 0 1
Example: acl-status=1
acl-suspend-acct
integer
Default: 0

Whether to allow the reseller to suspend or unsuspend accounts.

Enum: 0 1
Example: acl-suspend-acct=1
acl-thirdparty
integer
Default: 0

Whether to allow the reseller to manage third-party services.

Enum: 0 1
Example: acl-thirdparty=1
acl-track-email
integer
Default: 0

Whether to allow the reseller to view reports about email message delivery attempts from their account.

Enum: 0 1
Example: acl-track-email=1
acl-upgrade-account
integer
Default: 0

Whether to allow the reseller to upgrade or downgrade accounts.

Enum: 0 1
Example: acl-upgrade-account=1
acl-viewglobalpackages
integer
Default: 0

Whether to allow the reseller to use all global packages. For more information, read our reseller packages documentation.

Enum: 0 1
Example: acl-viewglobalpackages=1

Responses

Response Schema: application/json
object

Request samples

whmapi1 --output=jsonpretty \
  saveacllist \
  acllist='my_acl_list'

Response samples

Content type
application/json
{
  • "metadata": {
    • "command": "saveacllist",
    • "reason": "ACL List my_acl_list saved.",
    • "result": 1,
    • "version": 1
    }
}