---
title: "Return cPanel account system privileges"
method: GET
path: "/myprivs"
tags: ["Accounts", "Account Management"]
---

# Return cPanel account system privileges

`GET /myprivs`

This function retrieves the current user's [Access Control List (ACL)](https://go.cpanel.net/whmdocsEditResellerNameserversandPrivileges) privileges.

## Response `200`

HTTP Request was successful.

- object
  - `data` object
    - `privileges` object[] — An array of objects that contains the privileges available to the user, including any third-party ACL privileges.
      - `acct-summary` 0 | 1 — Allows the user to view an account summary. * `1` — Enabled. * `0` — Disabled.
      - `add-pkg` 0 | 1 — Allows the user to create packages. * `1` — Enabled. * `0` — Disabled.
      - `add-pkg-ip` 0 | 1 — Allows the user to create packages with dedicated IP addresses. * `1` — Enabled. * `0` — Disabled.
      - `add-pkg-shell` 0 | 1 — Allows the user to create packages with shell access. * `1` — Enabled. * `0` — Disabled.
      - `all` 0 | 1 — Provides all access privileges to the user. * `1` — Enabled. * `0` — Disabled. **Warning:** If this value is set to `1` , the user has `root` access.
      - `allow-addoncreate` 0 | 1 — Allows the user to create packages with addon domains. * `1` — Enabled. * `0` — Disabled.
      - `allow-emaillimits-pkgs` 0 | 1 — Allows the user to create packages with custom email limits. * `1` — Enabled. * `0` — Disabled.
      - `allow-parkedcreate` 0 | 1 — Allows the user to create packages with parked domains (aliases). * `1` — Enabled. * `0` — Disabled.
      - `allow-shell` integer — Allows the user to create an account with shell access. * `1` — Enabled. * `0` — Disabled.
      - `allow-unlimited-bw-pkgs` 0 | 1 — Allows the user to create packages with unlimited bandwidth. * `1` — Enabled. * `0` — Disabled.
      - `allow-unlimited-disk-pkgs` 0 | 1 — Allows the user to create packages with unlimited disk space quotas. * `1` — Enabled. * `0` — Disabled.
      - `allow-unlimited-pkgs` 0 | 1 — Allows the user to create packages with unlimited values for features (for example, unlimited email accounts). * `1` — Enabled. * `0` — Disabled.
      - `basic-system-info` 0 | 1 — Allows the user to retrieve basic system information. * `1` — Enabled. * `0` — Disabled.
      - `basic-whm-functions` 0 | 1 — Whether to give the reseller access to basic cPanel & WHM options. * `1` — Enabled. * `0` — Disabled.
      - `clustering` 0 | 1 — Allows the user to configure DNS clusters. * `1` — Enabled. * `0` — Disabled.
      - `cors-proxy-get` 0 | 1 — Allows the user to perform Cross-Origin Resource Sharing (CORS) HTTP requests. * `1` — Enabled. * `0` — Disabled.
      - `cpanel-api` 0 | 1 — Allows the reseller to execute cPanel [UAPI](https://go.cpanel.net/uapi) functions via WHM. * `1` — Enabled. * `0` — Disabled.
      - `cpanel-integration` 0 | 1 — Allows the user to manage how their server and its services connect to other servers and services. * `1` — Enabled. * `0` — Disabled.
      - `create-acct` 0 | 1 — Allows the user to create accounts. * `1` — Enabled. * `0` — Disabled.
      - `create-dns` 0 | 1 — Allows the user to create DNS zones. * `1` — Enabled. * `0` — Disabled.
      - `create-user-session` 0 | 1 — Allows the user to create a new temporary user session for a specified service. * `1` — Enabled. * `0` — Disabled. **Note:** This privilege allows an API token user to bypass any restrictions that you set on the API token. For more information, read our [Manage API Tokens](https://go.cpanel.net/whmdocsManageasisAPITokens) documentation.
      - `demo-setup` 0 | 1 — Allows the user to enable demo mode on accounts. * `1` — Enabled. * `0` — Disabled.
      - `digest-auth` 0 | 1 — Allows the user to manage Digest Authentication support. * `1` — Enabled. * `0` — Disabled.
      - `edit-account` 0 | 1 — Allows the user to modify accounts. * `1` — Enabled. * `0` — Disabled. **Warning:** This privilege allows circumvention of account creation limits, gives shell access unless explicitly disallowed, and provides access to dedicated IP addresses, among other features.
      - `edit-dns` 0 | 1 — Allows the user to edit DNS zones. * `1` — Enabled. * `0` — Disabled.
      - `edit-mx` 0 | 1 — Allows the user to edit MX entries. * `1` — Enabled. * `0` — Disabled.
      - `edit-pkg` 0 | 1 — Allows the user to create and delete packages. * `1` — Enabled. * `0` — Disabled.
      - `file-restore` 0 | 1 — Allows the user to restore specific files and directories from a backup. * `1` — Enabled. * `0` — Disabled.
      - `generate-email-config` 0 | 1 — Allows the user to generate a mobile configuration profile for an email account. * `1` — Enabled. * `0` — Disabled.
      - `kill-acct` 0 | 1 — Allows the user to delete their customers' accounts. * `1` — Enabled. * `0` — Disabled.
      - `kill-dns` 0 | 1 — Allows the user to delete DNS zones. * `1` — Enabled. * `0` — Disabled.
      - `limit-bandwidth` 0 | 1 — Allows the user to modify bandwidth limits on their accounts. * `1` — Enabled. * `0` — Disabled. **Warning:** This will allow circumvention of account package limits if you do not use resource limits.
      - `list-accts` 0 | 1 — Allows the user to list owned accounts. * `1` — Enabled. * `0` — Disabled.
      - `list-pkgs` integer — Allows the user to view existing hosting plans (packages). * `1` — Enabled. * `0` — Disabled.
      - `locale-edit` 0 | 1 — Allows the user to create and modify locales on the server. * `1` — Enabled. * `0` — Disabled.
      - `mailcheck` 0 | 1 — Allows the user to access WHM's [_Mail Troubleshooter_](https://go.cpanel.net/whmdocsMailTroubleshooter) interface (_WHM >> Home >> Mail >> Mail Troubleshooter_). * `1` — Enabled. * `0` — Disabled.
      - `manage-api-tokens` 0 | 1 — Allows the user to manage API tokens. * `1` — Enabled. * `0` — Disabled. **Note:** This ACL privilege allows an API token user to bypass any restrictions that you set on the API token.
      - `manage-dns-records` 0 | 1 — Allows the user to manage DNS records. * `1` — Enabled. * `0` — Disabled.
      - `manage-oidc` 0 | 1 — Allows the user to manage external authentication for their accounts. * `1` — Enabled. * `0` — Disabled.
      - `manage-styles` 0 | 1 — Allows the user to manage their server's cPanel styles. * `1` — Enabled. * `0` — Disabled.
      - `mysql-info` 0 | 1 — Allows the user to retrieve MySQL® database and user data. * `1` — Enabled. * `0` — Disabled.
      - `news` 0 | 1 — Allows the user to send news messages to customers' accounts. * `1` — Enabled. * `0` — Disabled.
      - `ns-config` 0 | 1 — Allows the user to manage nameservers. * `1` — Enabled. * `0` — Disabled.
      - `park-dns` 0 | 1 — Allows the user to park domains within WHM. * `1` — Enabled. * `0` — Disabled.
      - `passwd` 0 | 1 — Allows the user to modify passwords for customers' accounts. * `1` — Enabled. * `0` — Disabled. **Note:** This privilege allows an API token user to change account passwords and log in with a new password. For more information, read our [Manage API Tokens](https://go.cpanel.net/whmdocsManageasisAPITokens) documentation.
      - `quota` 0 | 1 — Allows the user to modify disk space quotas for accounts. * `1` — Enabled. * `0` — Disabled. **Warning:** This ACL privilege allows circumvention of account package limits if you do not use resource limits.
      - `rearrange-accts` 0 | 1 — Allows the user to rearrange the locations of customer accounts in order to free up disk space. * `1` — Enabled. * `0` — Disabled.
      - `resftp` 0 | 1 — Allows the user to re-sync FTP account passwords. * `1` — Enabled. * `0` — Disabled.
      - `restart` 0 | 1 — Allows the user to restart services on the server, such as Apache® or Exim. * `1` — Enabled. * `0` — Disabled.
      - `show-bandwidth` 0 | 1 — Allows the user to view the bandwidth usage of accounts. * `1` — Enabled. * `0` — Disabled.
      - `ssl` 0 | 1 — Allows the user to manage the SSL certificates installed on domains. * `1` — Enabled. * `0` — Disabled.
      - `ssl-buy` 0 | 1 — Allows the user to use WHM's [_Purchase and Install an SSL Certificate_](https://go.cpanel.net/whmdocsPurchaseandInstallanSSLCertificate) interface (_WHM >> Home >> SSL/TLS >> Purchase and Install an SSL Certificate_). * `1` — Enabled. * `0` — Disabled.
      - `ssl-gencrt` 0 | 1 — Allows the user to use the SSL CSR/CRT generator. * `1` — Enabled. * `0` — Disabled.
      - `ssl-info` 0 | 1 — Allows the user to view their server's SSL information. * `1` — Enabled. * `0` — Disabled.
      - `stats` 0 | 1 — Allows the user to view WHM's [_Server Information_](https://go.cpanel.net/whmdocsServerInformation) interface (_WHM >> Home >> Server Status >> Server Information_). * `1` — Enabled. * `0` — Disabled.
      - `status` 0 | 1 — Allows the user to view WHM's [_Service Status_](https://go.cpanel.net/whmdocsServiceStatus) interface (_WHM >> Home >> Server Status >> Service Status_). * `1` — Enabled. * `0` — Disabled.
      - `suspend-acct` 0 | 1 — Allows the user to suspend customers' accounts. * `1` — Enabled. * `0` — Disabled.
      - `thirdparty` 0 | 1 — Allows the user to manage third-party service offerings. * `1` — Enabled. * `0` — Disabled.
      - `track-email` 0 | 1 — Allows the user to view reports about email message delivery attempts from their account. * `1` — Enabled. * `0` — Disabled.
      - `upgrade-account` 0 | 1 — Allows the user to upgrade and downgrade customers' domain accounts. * `1` — Enabled. * `0` — Disabled.
      - `viewglobalpackages` 0 | 1 — Whether to allow the reseller to use all global packages. For more information, read our [reseller packages](https://go.cpanel.net/resellerpackages) documentation. * `1` — Enabled. * `0` — Disabled.
  - `metadata` object
    - `command` string — The method name called.
    - `reason` string — The reason the API function failed when the `metadata.result` field is 0. This field may display a success message when a function succeeds.
    - `result` 0 | 1 — * `1` - Success * `0` - Failed: Check the reason field for more details.
    - `version` integer — The version of the API function.

---

[API](https://skmtc.net/cpanel/apis/whm-api.md) · [All operations](https://skmtc.net/cpanel/apis/whm-api/llms.txt) · [OpenAPI document](https://skmtc-service-staging.skmtc.workers.dev/v1/apis/cpanel/whm-api/revisions/3da41671c02c/schema)
