Least privilege

Resellers should receive only the operations required for their business role. Avoid granting server-wide administrative capabilities where customer-level management is sufficient.

Review areas

• Customer creation and management.
• Package assignment.
• Website lifecycle actions.
• Resource administration.
• Bulk operations.
• Administrative access to system-level controls.

Periodic review

Review delegated permissions when reseller responsibilities change and remove access that is no longer required.