DirectAdmin first steps: admin, reseller and user levels

DirectAdmin splits access into three levels: admin, reseller and user. This guide explains the DirectAdmin admin, reseller and user levels and shows you how to navigate each level's tools after installation.

You will check that DirectAdmin is running, log in to port 2222, and learn which menu belongs to which level so you do not hand out too much access by mistake.

DirectAdmin admin, reseller and user levels

Think of the three levels as layers of responsibility:

• Admin — one account per server. Controls server-wide settings, packages, IPs, DNS, services and all other accounts.
• Reseller — manages a set of hosting accounts. Can create users, assign packages and manage some DNS and mail settings within limits.
• User — one hosting account. Manages its own domain, email, files, databases, FTP, SSL and cron jobs.

The login URL is the same for all three levels. DirectAdmin decides what you can see from the username and password you use.

Before you start

You need:

• A Linux VPS with DirectAdmin already installed and your licence activated. Buy the licence from the DirectAdmin vendor and follow their install guide.
• SSH access as a sudo user or root. See First steps after your Linux VPS is ready if you have not connected yet.
• The DirectAdmin admin password from installation.
• TCP port 2222 open in your server firewall and any cloud firewall.
• A browser on your own computer.

Check the service and log in

Connect to your server and confirm DirectAdmin is running:

ssh deploy@203.0.113.10
sudo systemctl status directadmin
sudo ss -tlnp | grep 2222

You should see active (running) and a listener on 0.0.0.0:2222 or :::2222. If the port is closed, open it:

# Ubuntu / Debian with UFW
sudo ufw allow 2222/tcp

# AlmaLinux / Rocky Linux with firewalld
sudo firewall-cmd --permanent --add-port=2222/tcp
sudo firewall-cmd --reload

Now open your browser and go to:

https://203.0.113.10:2222

Replace 203.0.113.10 with your server IP or hostname. Accept the certificate warning only if you have not installed a trusted certificate yet.

Log in with the admin username and the password you set during installation. You land in the admin dashboard.

Admin level: server-wide tools

The admin level is for the server owner. After login, look at the top menu. You will see sections such as Admin Tools, Server Manager, Account Manager and System Info.

Common admin tasks:

• Create resellers and users under Account Manager.
• Manage hosting packages, IP addresses and DNS templates.
• Check mail queues, service status and server load.
• Install or remove plugins and change global PHP settings.
• Switch into a user view with the User Level link in the top bar.

You can list DirectAdmin accounts from SSH:

sudo ls -1 /usr/local/directadmin/data/users

Each directory name is a DirectAdmin account. Treat this command as read-only. Creating or editing files here by hand is not supported; use the panel or vendor CLI.

Reseller level: manage accounts and packages

A reseller logs in to the same https://203.0.113.10:2222 URL with their own username and password. The top menu changes to Reseller Tools, User Tools and Account Manager.

What a reseller can usually do:

1. Create, suspend and delete user accounts.
2. Assign packages and limits such as disk, bandwidth, email and databases.
3. Manage DNS records for accounts they own, if the admin allows it.
4. Log in as a user to help with a problem.
5. View statistics for their accounts.

What a reseller cannot do: change server services, edit global DNS templates, manage other resellers, or change the admin password. If a reseller needs a new IP address or higher limits, the admin must assign it.

User level: one hosting account

A user logs in with their own username and password. The menu shows User Tools and System Info only. There are no admin or reseller menus.

Typical user tools:

• Domain Setup — point a domain or subdomain to the account.
• Email Accounts — create mailboxes, forwarders and autoresponders.
• FTP Accounts — manage file transfer users.
• MySQL Management — create databases and database users. See How to create a MySQL user and grant privileges if you also manage databases from SSH.
• File Manager — upload and edit files in the browser.
• SSL Certificates — install a certificate for the domain.
• Cron Jobs — schedule commands for that account.

A user cannot see other accounts, change packages, or restart server services. If a user needs more disk space or a new domain, the reseller or admin must change the package.

Switch between levels safely

DirectAdmin lets admins and resellers switch down to a user view. In the top bar, click your username or User Level and choose the account. This is useful for checking what a customer sees.

Best practice:

1. Keep admin for server changes only.
2. Create a reseller account for each customer or team.
3. Create a user account for each site.
4. Give users their own DirectAdmin login instead of sharing a reseller login.

Check it works

Run through these checks after your first login:

1. From SSH, confirm the service is active:

sudo systemctl is-active directadmin
curl -kI https://203.0.113.10:2222

Expect active and an HTTP response such as 200 or 302.

1. In the browser, log in as admin and confirm you see Admin Tools.
2. Use the User Level link to open a user account. Confirm you see User Tools and no admin menus.
3. Log out completely. Log in as a reseller and confirm you see Reseller Tools.
4. Log in as a normal user and confirm you can only see that account's domain, email and files.
5. Check the DirectAdmin logs for failed logins you do not recognise:

sudo tail -n 50 /var/log/directadmin/error.log
sudo grep -i "failed" /var/log/directadmin/security.log