Reseller privileges in WHM are controlled by access control lists (ACLs). An ACL list is a named set of privileges you apply to resellers, so every reseller on a plan gets the same rights and you can change them all in one place.
MdmHost manages these server settings on shared, reseller and master reseller plans. This guide is for administrators of their own cPanel VPS or dedicated server with root access.
Before you start
- Root access to WHM.
- A clear idea of what each reseller plan should allow.
Create an ACL list
- Go to WHM → Resellers → Edit Reseller Nameservers and Privileges and open any reseller, or go to WHM → Resellers → Manage Reseller ACLs (name varies by version).
- Scroll to the privileges, tick the ones the plan needs (see below).
- Under Save ACL List, enter a name such as
reseller_standardand save.
Recommended privileges
| Group | Usually safe to grant |
|---|---|
| Account Information | List Accounts, View Account Bandwidth Usage |
| Account Management | Create Accounts, Modify Accounts, Suspend Accounts, Terminate Accounts, Upgrade/Downgrade Accounts, Change Passwords, Edit Quotas |
| Packages | Add/Remove Packages, Edit Packages |
| DNS | Edit DNS zones, Park DNS zones, Add DNS zones |
| Third party services | Manage OAuth/API tokens as needed |
| Troubleshooting | Mail troubleshooter, track email delivery |
Privileges to keep back
| Privilege | Why |
|---|---|
| all ("Everything") | Equivalent to root |
| Allow creation of accounts with unlimited resources / Allow overselling | Breaks capacity planning unless you sell it |
| Allow accounts with shell access | Shell access raises risk; grant only to trusted resellers |
| Rearrange accounts / Manage IP addresses | Server-level changes |
| Restore / transfer accounts | Can overwrite data and import untrusted archives; enable per reseller on request |
Warning: Restore privileges let resellers import any cPanel archive, including malicious ones. Grant them case by case (see the guide on restoring a cPanel backup).
Apply an ACL list to resellers
- In Edit Reseller Nameservers and Privileges, choose a reseller.
- Under Apply ACL List, pick the list and click Apply, then Save All Settings.
When you later edit the list, every reseller using it gets the change.
Tip: Make one ACL list per plan, for example standard and advanced, and name lists after the plans you sell. It makes audits easy.
Check the result
Log in as a reseller in a private window and compare the WHM menu to what you intended. End-user guides your resellers will follow include modifying accounts and DNS zone management.
Troubleshooting
A reseller cannot see a menu item
The matching privilege is not in their ACL list, or the feature also needs a server setting. Add it to the list and save.
Changes to the list did not apply
The reseller has individually ticked privileges rather than the list. Reapply the ACL list to them.
Frequently asked questions
Are ACL lists the same as Feature Manager lists?
No. ACL lists control what resellers can do in WHM; feature lists control which icons end users see in cPanel.
Can I copy ACLs between servers?
ACL lists are stored on the server; recreate them on the new server, or include them in your server migration plan.