Fewer permission for client cPanel account, full permission for me

[markus909]

Hi there,

I am completely new to cPanel and play around with the setup for a week now as a reseller.

I am very surprised that I am not able to strip down the cPanel account for the client, but get myself full access.

Goal

• Client gets a cPanel account to be able to access the cPanel backend. They should have access to some but not all settings. This can be necessary for some situations. Also it help to increase trust, as the client feels he can control things himself when I am not accessible
• I myself have full access of course to cPanel to fully manage the account

That sounds like a very basic request to me, but I could not figure it out yet.

First attempt was to create a Feature List → assign the Feature List to a Package → assign the Package to an Account.
While that stripped down the cPanel account for the client, it did so for myself as well. So my cPanel account that I access via WHM is completely useless.

The same was asked already here: Limit Client Features But Not Root and here Prevent cpanel user from accessing some features

I am interested if there is already a solution or workaround or suggested way to work with this.

Isn't this very critical and essential? Giving the client some access but not all. There will be always tasks that the client want / need to do themselves, no? (eg. email accounts)

 

[cPRex]

Hey there! The details you're looking for can be found here:

Manage Team Roadmap | cPanel & WHM Documentation

An outline for feature releases of a system to allow external users access to cPanel.

docs.cpanel.net

as that is what we're working towards. It is experimental in version 108, so you'll be able to see the options there if you're running a version 108 system.

 

[markus909]

Hey there! The details you're looking for can be found here:

Manage Team Roadmap | cPanel & WHM Documentation

An outline for feature releases of a system to allow external users access to cPanel.

docs.cpanel.net

as that is what we're working towards. It is experimental in version 108, so you'll be able to see the options there if you're running a version 108 system.

Yes, that is exactly what I am looking for, and exactly what I expected to be available. It seems such a standard feature for web hosting / reselling. As I read those hundreds of comments from the last 10 years about this topic, is there some expected time of arrival? I am new to cPanel, so I don't know how it works here. Are we talking about months, a year, or many years?

It's still interesting how much is done nowadays towards security but then you need to share the main user account (user + pw) for a domain, giving access to pretty much everything.

 

[cPRex]

Since it is in version 108 already, the ETA would be now if you wanted to do some experimental testing. I know that means it's not production-ready, but I don't have a timeframe on when that will be moved to an officially stable feature.

 

[markus909]

I see .. as I am new to cPanel I don't know how it works here, long time user can estimate it probably already by experience. However, if I don't run cPanel myself but am on a Reseller account from a hoster, I assume it would anyway depend on them if the 1st update and 2nd enable the feature. Please correct me if I am wrong. Thanks!

 

[cPRex]

If you are a reseller, you are at the mercy of the root user with how updates and features are enabled.

 

[markus909]

If you are a reseller, you are at the mercy of the root user with how updates and features are enabled.

That's what I was afraid of - anyone know if this will be just included as a new feature from 108 on, or will this be some paid upgrade (again, I just don't know the eco system of cPanel well enough yet)

 

[ffeingol]

It won't be a paid upgrade (typicall), you just have to wait until it's implemented as a production feature. Once it's implemented, you have to see if/how your provider implements it. This has been a highly requested feature, but that does not mean that every host will adopt it as soon as it's released. It's prob. going to affect a lot of "internal" procedures for hosts so some will adopt quickly and others will take more time.

 

[markus909]

If you are a reseller, you are at the mercy of the root user with how updates and features are enabled.

I asked the hosting company and they upgraded me within a minute to version 108 - so that's a good sign. But it's anyway only experimental and not available to the public yet. But from how I understand it, if it goes public, it requires at least 108, and I am on 108 now

 

[markus909]

It won't be a paid upgrade (typicall), you just have to wait until it's implemented as a production feature. Once it's implemented, you have to see if/how your provider implements it. This has been a highly requested feature, but that does not mean that every host will adopt it as soon as it's released. It's prob. going to affect a lot of "internal" procedures for hosts so some will adopt quickly and others will take more time.

Understood - thanks!

 

[cPRex]

At this point, and while these numbers certainly aren't set in stone, I'd expect it to get removed from experimental status in version 112. If we follow our normal release schedule (although 108 is a bit more delayed than usual) that should be around quarter 3 of this year.

 

[markus909]

At this point, and while these numbers certainly aren't set in stone, I'd expect it to get removed from experimental status in version 112. If we follow our normal release schedule (although 108 is a bit more delayed than usual) that should be around quarter 3 of this year.

I think that is something I can deal with - and when I think about many others who were waiting for 10 to 20 years, it seems I don't need to be that patient. Joke aside, when I decide now on my reseller platform to run my client projects on, it is of course important to figure out the most appropriate platform. For me, a sole proprietor, I find it very important, that I can always hand over the cPanel account to the client. It's easier for the client to trust to hosting with me. And still, I want to avoid that they can access everything to reduce the risk of a bigger loss, e.g. should I run JetBackup, they should not be able to access it