How to limit privileges of a reseller account in WHM?

After creating Reseller account in WHM, the most important part is to set Reseller privileges. You should be more cautious while granting access to your reseller accounts because giving too many privileges may allow resellers to gain more access than they supposed to have. You would not like to allow any of your reseller account to have root access.

  1. Log into your WHM.
  2. Under Resellers section, select Edit Reseller Nameservers and Privileges.

    Edit Reseller Privileges

  3. Select the reseller you want to manage from the list and click Submit.
  4. You're now at the Edit Reseller Nameservers and Privileges page in WHM. At this point, you can make the desired changes and click Save All Settings at the bottom of the page.
  5. Following are the ideal options to select while creating Resellet account.

Account Creation Limits


At Account Creation Limits section first 2 options will be set by the reseller plan itself. Under Resource Usage Limits, do not check an option of Overselling Allowed.

Account Creation Limits

Feature Limits (ACL Lists)


At Feature Limits section, keep following options checked.


Account Information


  • List Accounts
  • View Account Bandwidth Usage


Account Management

  • (Un)Suspend
  • Change Passwords
  • Create
  • Edit MX Entries
  • Terminate
  • Upgrade/Downgrade

    Standard Privileges


Dns


  • Add
  • Edit
  • Park
  • Remove


Packages


  • Add/Remove
  • Edit


Package Privileges


At Package Previleges section, keep following options checked.


Accounts


Prevent Accounts from being created with shell access

Packages Creation


  • Allow Creation of Packages with Addon Domains
  • Allow Creation of Packages with Parked Domains

    Package Privileges



Super Privileges


Be careful while you grant the access under Super Privileges section. Keep only 3 options checked as follows.

  • Account Modification (warning: this will allow circumvention of account creation limits, give shell access unless explicitly disallowed, dedicated ips, etc)
  • Bandwidth Limiting Modification (Warning: This will allow circumvention of account package limits if you are not using resource limits)
  • Quota Modification (Warning: This will allow circumvention of account package limits if you are not using resource limits)

    Super Privileges


Nameservers


By default, server's primary nameservers would be assigned to the newly created cPanel account under reseller. If you want to allow reseller to use their own nameservers, replace the default nameservers with the reseller's private nameservers.

Nameservers
  • 0 Users Found This Useful

Was this answer helpful?

Related Articles

How to install CloudFlare cPanel plugin in WHM?

CloudFlare plugin integrates CloudFlare services with cPanel server and allows your customers to...

Fix - tailwatchd service is down in WHM

One of our customers received an email from WHM that service tailwatchd is down. We have taken...

Fix - cPanel Account Restore Failed: Failed to create the account. A database owner with the name “cpaneluser” already exists

One of our customers was migrated from another cPanel host. While restoring his account to our...

Fatal error: Call to undefined function mysqli_connect() in /home/user/public_html/includes/connection.php

Error Message Fatal error: Call to undefined function mysqli_connect() in...

SMTP error while using PHPMailer with GMail Authentication

Problem Statement One of our Linux VPS customer was unable to send emails through PHPMailer...