How to limit privileges of a reseller account in WHM?

After creating Reseller account in WHM, the most important part is to set Reseller privileges. You should be more cautious while granting access to your reseller accounts because giving too many privileges may allow resellers to gain more access than they supposed to have. You would not like to allow any of your reseller account to have root access.

  1. Log into your WHM.
  2. Under Resellers section, select Edit Reseller Nameservers and Privileges.

    Edit Reseller Privileges

  3. Select the reseller you want to manage from the list and click Submit.
  4. You're now at the Edit Reseller Nameservers and Privileges page in WHM. At this point, you can make the desired changes and click Save All Settings at the bottom of the page.
  5. Following are the ideal options to select while creating Resellet account.

Account Creation Limits


At Account Creation Limits section first 2 options will be set by the reseller plan itself. Under Resource Usage Limits, do not check an option of Overselling Allowed.

Account Creation Limits

Feature Limits (ACL Lists)


At Feature Limits section, keep following options checked.


Account Information


  • List Accounts
  • View Account Bandwidth Usage


Account Management

  • (Un)Suspend
  • Change Passwords
  • Create
  • Edit MX Entries
  • Terminate
  • Upgrade/Downgrade

    Standard Privileges


Dns


  • Add
  • Edit
  • Park
  • Remove


Packages


  • Add/Remove
  • Edit


Package Privileges


At Package Previleges section, keep following options checked.


Accounts


Prevent Accounts from being created with shell access

Packages Creation


  • Allow Creation of Packages with Addon Domains
  • Allow Creation of Packages with Parked Domains

    Package Privileges



Super Privileges


Be careful while you grant the access under Super Privileges section. Keep only 3 options checked as follows.

  • Account Modification (warning: this will allow circumvention of account creation limits, give shell access unless explicitly disallowed, dedicated ips, etc)
  • Bandwidth Limiting Modification (Warning: This will allow circumvention of account package limits if you are not using resource limits)
  • Quota Modification (Warning: This will allow circumvention of account package limits if you are not using resource limits)

    Super Privileges


Nameservers


By default, server's primary nameservers would be assigned to the newly created cPanel account under reseller. If you want to allow reseller to use their own nameservers, replace the default nameservers with the reseller's private nameservers.

Nameservers
  • 0 Users Found This Useful

Was this answer helpful?


Related Articles

How to Open Ports in WHM Firewall?

There are times when you are required to open some ports in the firewall to run applications....

How to redirect cPanel/Webmail to encrypted connection [SSL]?

When you want to transmit sensitive information over the Internet, you should use HTTPS instead...

Fatal error: Call to undefined function mysqli_connect() in /home/user/public_html/includes/connection.php

Error Message Fatal error: Call to undefined function mysqli_connect() in...

SMTP error while using PHPMailer with GMail Authentication

Problem Statement One of our Linux VPS customer was unable to send emails through PHPMailer...

Fix :: file open /home/user/etc/domainname/passwd failed with error no such file or directory

Problem Statement Getting error while creating an email account from cPanel. Error Message...