How to Determine Which API or Reseller Permissions are Required

Introduction

cPanel provides a way to limit Reseller accounts and API tokens so that the user of the reseller account or API token can only make use of certain API commands or features in WHM.

In order to help determine what permissions are required to make use of a certain API endpoint or WHM feature, we have the following guide detailing each option and what it applies to:

https://api.docs.cpanel.net/guides/guide-to-whm-plugins/guide-to-whm-plugins-acl-reference-chart/

The following steps can help guide you through the process of setting up these limits:

To Limit API Tokens

1. Login to WHM as the root user
2. Navigate to: Home »Development »Manage API Tokens
3. Click the blue "Generate Token" button
4. Enter a name for your token
5. Select the permissions you wish to be available for this API Token
6. Click the blue Save button

To Limit Reseller Accounts

1. Login to WHM as the root user
2. Navigate to: Home »Resellers »Edit Reseller Nameservers and Privileges
3. Select your reseller user (If you only have one, this step is skipped automatically for you)
4. Under the "Feature Limits (ACL Lists)" section ensure that only needed permissions are checked
   1. Optionally save your permission selections as an ACL that can be reused again later with: Save selections as a new ACL list
5. Scroll to the bottom and click "Save All Settings"