--- title: "Return all privilege lists and settings" method: GET path: "/listacls" tags: ["Resellers", "Account Permissions"] --- # Return all privilege lists and settings `GET /listacls` This function lists the server's [Access Control Lists (ACLs)](https://go.cpanel.net/GuidetoWHMPluginsAccessControlLists) and each list's privileges. ## Response `200` HTTP Request was successful. - object - `data` object - `acl` object[] — An array of objects containing ACL settings. - `name` string — The ACL's name. - `privileges` object — A list of ACL privileges, including any third-party ACL privileges that exist for the user. - `acct-summary` 1 | 0 — Whether to allow the reseller to view an account summary. * `1` — Allow. * `0` — Do not allow. - `add-pkg` 1 | 0 — Whether to allow the reseller to add and remove hosting plans (packages). * `1` — Allow. * `0` — Do not allow. - `add-pkg-ip` 1 | 0 — Whether to allow the reseller to create packages with a dedicated IP address. * `1` — Allow. * `0` — Do not allow. - `add-pkg-shell` 1 | 0 — Whether to allow the reseller to create packages with shell access. * `1` — Allow. * `0` — Do not allow. - `all` 1 | 0 — Whether to grant the reseller **all** ACL privileges. **Warning:** A value of `1` grants `root`-level privileges to the reseller. * `1` — Allow. * `0` — Do not allow. - `allow-addoncreate` 1 | 0 — Whether to allow the reseller to create packages with addon domains. * `1` — Allow. * `0` — Do not allow. - `allow-emaillimits-pkgs` 1 | 0 — Whether to allow the reseller to create packages with email quotas that are **not** the default quotas. * `1` — Allow. * `0` — Do not allow. - `allow-parkedcreate` 1 | 0 — Whether to allow the reseller to create packages with parked domains (aliases). * `1` — Allow. * `0` — Do not allow. - `allow-shell` 1 | 0 — Whether to allow the reseller to create accounts with shell access. * `1` — Allow. * `0` — Do not allow. - `allow-unlimited-bw-pkgs` 1 | 0 — Whether to allow the reseller to create packages with unlimited bandwidth. * `1` — Allow. * `0` — Do not allow. - `allow-unlimited-disk-pkgs` 1 | 0 — Whether to allow the reseller to create packages with unlimited disk space. * `1` — Allow. * `0` — Do not allow. - `allow-unlimited-pkgs` 1 | 0 — Whether to allow the reseller to create packages with unlimited features. * `1` — Allow. * `0` — Do not allow. - `basic-system-info` 1 | 0 — Whether to allow the user to retrieve basic system information. * `1` — Allow. * `0` — Do not allow. - `basic-whm-functions` 1 | 0 — Whether to allow the reseller to access basic cPanel & WHM options. * `1` — Allow. * `0` — Do not allow. - `clustering` 1 | 0 — Whether to allow the reseller to use DNS clusters. * `1` — Allow. * `0` — Do not allow. - `cors-proxy-get` 1 | 0 — Whether to allow the reseller to perform Cross-Origin Resource Sharing (CORS) HTTP requests. * `1` — Allow. * `0` — Do not allow. - `cpanel-api` 1 | 0 — Whether to allow the reseller to execute cPanel API 1, cPanel API 2 and UAPI functions via WHM. * `1` — Allow. * `0` — Do not allow. - `cpanel-integration` 1 | 0 — Whether to allow the reseller to manage cPanel integration links. * `1` — Allow. * `0` — Do not allow. - `create-acct` 1 | 0 — Whether to allow the reseller to create accounts. * `1` — Allow. * `0` — Do not allow. - `create-dns` 1 | 0 — Whether to allow the reseller to add DNS zones. * `1` — Allow. * `0` — Do not allow. - `create-user-session` 1 | 0 — Whether to allow the reseller to create a new temporary user session for a specified service. * `1` — Allow. * `0` — Do not allow. **Note:** This ACL privilege allows an API token user to bypass any restrictions that you set on the API token. For more information, read our [Manage API Tokens](https://go.cpanel.net/ManageAPITokens) documentation. - `demo-setup` 1 | 0 — Whether to allow the reseller to enable demo mode for accounts. * `1` — Allow. * `0` — Do not allow. - `digest-auth` 1 | 0 — Whether to allow the reseller to manage Digest Authentication. * `1` — Allow. * `0` — Do not allow. - `edit-account` 1 | 0 — Whether to allow the reseller to edit accounts. * `1` — Allow. * `0` — Do not allow. - `edit-dns` 1 | 0 — Whether to allow the reseller to edit DNS zones. * `1` — Allow. * `0` — Do not allow. - `edit-mx` 1 | 0 — Whether to allow the reseller to edit MX entries. * `1` — Allow. * `0` — Do not allow. - `edit-pkg` 1 | 0 — Whether to allow the reseller to edit hosting plans (packages). * `1` — Allow. * `0` — Do not allow. - `frontpage` 1 | 0 — Whether to allow the reseller to manage Microsoft® FrontPage® Extensions. * `1` — Allow. * `0` — Do not allow. **Note:** cPanel & WHM ignores all Microsoft FrontPage settings and parameters. - `generate-email-config` 1 | 0 — Whether to allow the reseller to generate a mobile configuration profile for an email account. * `1` — Allow. * `0` — Do not allow. - `kill-acct` 1 | 0 — Whether to allow the reseller to terminate accounts. * `1` — Allow. * `0` — Do not allow. - `kill-dns` 1 | 0 — Whether to allow the reseller to remove DNS zones. * `1` — Allow. * `0` — Do not allow. - `limit-bandwidth` 1 | 0 — Whether to allow the reseller to modify bandwidth limits (quotas). * `1` — Allow. * `0` — Do not allow. **Warning:** If you do not use resource limits, a value of `1` allows resellers to circumvent package limits for disk space. - `list-accts` 1 | 0 — Whether to allow the reseller to view the list of accounts. * `1` — Allow. * `0` — Do not allow. - `list-pkgs` 1 | 0 — Whether to allow the reseller to view existing hosting plans. * `1` — Allow. * `0` — Do not allow. - `locale-edit` 1 | 0 — Whether to allow the reseller to create and modify locales on the server. * `1` — Allow. * `0` — Do not allow. - `mailcheck` 1 | 0 — Whether to allow the reseller to troubleshoot mail delivery. * `1` — Allow. * `0` — Do not allow. - `manage-api-tokens` 1 | 0 — Whether to allow the reseller to manage API tokens. * `1` — Allow. * `0` — Do not allow. **Note:** This ACL privilege allows an API token user to bypass any restrictions that you set on the API token. For more information, read our [Manage API Tokens](https://go.cpanel.net/ManageAPITokens) documentation. - `manage-dns-records` 1 | 0 — Whether to allow the reseller to manage DNS records. * `1` — Allow. * `0` — Do not allow. - `manage-oidc` 1 | 0 — Whether to allow the reseller to manage external authentication for their accounts. * `1` — Allow. * `0` — Do not allow. - `manage-styles` 1 | 0 — Whether to allow the reseller to manage their server's cPanel styles. * `1` — Allow. * `0` — Do not allow. - `mysql-info` 1 | 0 — Whether to allow the reseller to retrieve MySQL® database and user data. * `1` — Allow. * `0` — Do not allow. - `news` 1 | 0 — Whether to allow the reseller to modify the server's news. * `1` — Allow. * `0` — Do not allow. - `ns-config` 1 | 0 — Whether to allow the reseller to manage nameserver records. * `1` — Allow. * `0` — Do not allow. - `park-dns` 1 | 0 — Whether to allow the reseller to park DNS zones. * `1` — Allow. * `0` — Do not allow. - `passwd` 1 | 0 — Whether to allow the reseller to change passwords. * `1` — Allow. * `0` — Do not allow. **Note:** This privilege allows an API token user to change account passwords and log in with a new password. For more information, read our [Manage API Tokens](https://go.cpanel.net/ManageAPITokens) documentation. - `quota` 1 | 0 — Whether to allow the reseller to modify quotas. * `1` — Allow. * `0` — Do not allow. **Warning:** If you do not use resource limits, a value of `1` allows resellers to circumvent package limits for disk space. - `rearrange-accts` 1 | 0 — Whether to allow the reseller to rearrange accounts. * `1` — Allow. * `0` — Do not allow. - `resftp` 1 | 0 — Whether to allow the reseller to resync FTP passwords. * `1` — Allow. * `0` — Do not allow. - `restart` 1 | 0 — Whether to allow the reseller to restart services. * `1` — Allow. * `0` — Do not allow. - `show-bandwidth` 1 | 0 — Whether to allow the reseller to view account bandwidth usage. * `1` — Allow. * `0` — Do not allow. - `ssl` 1 | 0 — Whether to allow the reseller to perform SSL site management. * `1` — Allow. * `0` — Do not allow. - `ssl-buy` 1 | 0 — Whether to allow the reseller to purchase SSL certificates. * `1` — Allow. * `0` — Do not allow. - `ssl-gencrt` 1 | 0 — Whether to allow the reseller to generate SSL certificates. * `1` — Allow. * `0` — Do not allow. - `ssl-info` 1 | 0 — Whether to allow the reseller to view their server's SSL information. * `1` — Allow. * `0` — Do not allow. - `stats` 1 | 0 — Whether to allow the reseller to view server information. * `1` — Allow. * `0` — Do not allow. - `status` 1 | 0 — Whether to allow the reseller to view the server's status. * `1` — Allow. * `0` — Do not allow. - `suspend-acct` 1 | 0 — Whether to allow the reseller to suspend or unsuspend accounts. * `1` — Allow. * `0` — Do not allow. - `thirdparty` 1 | 0 — Whether to allow the reseller to manage third-party services. * `1` — Allow. * `0` — Do not allow. - `track-email` 1 | 0 — Whether to allow resellers to view reports about email message delivery attempts from their account. * `1` — Allow. * `0` — Do not allow. - `upgrade-account` 1 | 0 — Whether to allow the reseller to upgrade or downgrade accounts. * `1` — Allow. * `0` — Do not allow. - `viewglobalpackages` 1 | 0 — Whether to allow the reseller to use all [global packages](https://go.cpanel.net/resellerpackages). * `1` — Allow. * `0` — Do not allow. - `metadata` object - `command` string — The method name called. - `reason` string — The reason the API function failed when the `metadata.result` field is `0`. This field may display a success message when a function succeeds. - `result` 1 | 0 — * `1` — Success. * `0` — Failed. Check the `reason` field for more details. - `version` integer — The version of the API function. --- [API](https://skmtc.net/cpanel/apis/whm-api.md) · [All operations](https://skmtc.net/cpanel/apis/whm-api/llms.txt) · [OpenAPI document](https://skmtc-service-staging.skmtc.workers.dev/v1/apis/cpanel/whm-api/revisions/3da41671c02c/schema)