Manage Sub-Admins
A Sub-Admin is a specialspecialized Adminaccount account.that allows you to delegate administrative tasks while maintaining high security for your primary credentials. You can restrictdefine thegranular permissionsaccess onlevels—ranging differentfrom levelsview-only (view,to edit,full delete permissions, or no access) forpermissions—across different sections of the Admin PanelPanel, (such as Users, Domains, Logs,and etc.).Logs.
Sub-Admin youScope canLimit: restrictSub-Admins logincannot be restricted to manage only specific domains; they have access to the entire account infrastructure. If you require a setup where an administrator is limited to managing only a few specific knowndomains, IPs.please contact us about our Super Panel solution.
Some
Common examplesUse for using sub-admins are the following:Cases
-
API
integrationIntegration:-Avoidyou shouldn't useusing yourmainprimary Admin accounttoforauthenticateautomatedwithscripts.the API. WHMCSpluginWHMCS/HostBill
-Plugins:useAuthenticate your billing platform safely using a dedicated Sub-AdminAdmin.-
Team Collaboration: Assign individual accounts to
authenticateteamyourmembersWHMCStoplugintrack dividing the workactions andresponsibilitieslimitwithinresponsibilities.a team - each team member can have a Sub-Admin
Best Practices
API Integration
For API authentication, you must use an Admin username and password. ThisTo isintegrate with our JSON API or platforms like WHMCS, we recommend the setupfollowing wesecurity recommend:profile:
secureSecure Your Main Account: Enable Two-Factor Authentication (2FA) on yourmainprimary Admin accountby activating Two-factor authentication. You can continue to use these credentialsforAdmin Panel direct login and perform actions via theweb interfaceof the Admin Panel.logins.createCreate a Dedicated Sub-Admin: Use a unique Sub-Admin for each integration.- IP Restriction: Since API
access/only.WHMCSYouSub-Adminscancannotenableuseonly the permissions2FA, youintegratemustwith the API or allow unrestricted access. - secure
your API Sub-Adminthem by restrictingloginaccess to the specificIPsIP- these should be the IPsaddresses of yourserversconnectingthat connect through the API.servers. - optional: create other Sub-Admin for your team members that will use the web interface.
Once you've created your API Sub-Admin, please email our Support Team to enable unlimited email account creation for that Sub-admin. Without this step, the Sub-Admin will be limited by the resources of your current subscription, which will restrict your ability to create accounts for your clients. We'll remove these limits so your API integration can scale properly.
WHMCSInternal PluginTeam Members
ToSharing connecta your WHMCS using our plugin, you must authenticate using an Admin username and password. This is the setup we recommend:
secure your mainsingle Admin accountby activating Two-factor authentication. You can continue to use these credentials for Admin Panel direct login and perform actions via the web interface of the Admin Panel.createis aSub-Adminsecurityforrisk.WHMCS access only. You can allow unrestricted permissions.secure your WHMCS Sub-Admin by restricting login access to specific IPs - the IP of your WHMCS server.optional: create other Sub-Admin for your team members that will use the web interface.
Once you've created your Sub-Admin for the WHMCS integration, please email our Support Team to enable unlimited email account creation for that Sub-admin. Without this step, the Sub-Admin will be limited by the resources of your current subscription, which will restrict your ability to create accounts for your clients. We'll remove these limits so your WHMCS integration can scale properly.
Team members
We don't recommend you share the same Admin account with other people, but instead,Instead, create a Sub-Admin for each member.team Thismember:
-
canEnable
enable2FA:two-factorEachauthenticationmember should activate their own 2FA foreachaccountand adequately secure your account.security. -
Furthermore,TieredyouPermissions:canAssignsetonlyspecificthelevelslevel of access required foreachtheirofspecifictheroleSub-Admin(e.g.,andSupportrestrictstaffthemayresponsibilitiesonlyofneedeach"Impersonate"memberaccessofforyourtroubleshooting).team.
Manage Sub-Admins
Add a Sub-Admin
-
Go to the Admin Panel.
- Log in using your main Admin username and password.
- Click on Sub-Admins in the menu.
- Click on the New button.
- Fill in the details of your new Sub-Admin:
- Sub-Admin username
- Sub-Admin password
- Sub-Admin e-mail address - will be used for password recovery
- Sub-Admin full name
- Select the permissions for each section. Each level of permission is numbered; the higher levels include the ones below it ( level 2 includes level 1, level 3 includes level 1 and 2, etc.):
- Account History: see the actions performed by Admin and Sub-Admins on the Home page
- Users: view/manage/remove/impersonate Users (mailboxes). The highest level is 5 - Impersonate and allows you to "sign in as" the User into Webmail and User Panel.
- Domains: view/manage/remove Domains.
- Aliases: view/manage/remove Aliases.
- Lists: view/manage/remove distribution Lists.
- Smart Lists: view/manage/remove Smart Lists.
- Branding: view/update branding settings for the main Admin account.
- Filtering: view/modify/remove whitelist and blacklist entries for Spam Filtering.
- Logs: view Incoming and Outgoing Logs, Last logins.
- Click on the Add
SubadminSub-admin button to save.
Example:
Remove a Sub-Admin
-
Go to the Admin Panel.
- Log in using your main Admin username and password.
- Click on Sub-Admins in the menu.
- Click on the Delete icon next to the Sub-Admin you want to remove.
Update a Sub-Admin
You can update all the details and permissions of a Sub-Admin.
-
Go to the Admin Panel.
- Log in using your main Admin username and password.
- Click on Sub-Admins in the menu.
- Click on the Edit (pencil) button next to the Sub-Admin you want to update.
- Update the details. Leave the Password field blank if you want to update permissions but don't want to change the password.
- Click on the Update button to save the changes.
Restrict Sub-Admin login access
Log in as the Sub-Admin and follow the instructions for restricting login access.
Two-factor authentication for Sub-admins
Log in as the Sub-Admin and follow the instructions for enabling two-factor authentication. Please note you cannot enable two-factor authentication for a Sub-Admin that you use for API or WHMCS authentication - use restricted login access instead.





