Plan permissions (Service Plans > a plan > the “Permissions” tab) define services and permissions provided with the plan.

Permissions enable customers to change specific settings of their subscriptions. When a subscription is created, Plesk applies the preset values from the plan to the settings the customer can change. Afterwards, updating the plan or applying an add-on plan does not override changes made by the customer.

Below you will see a list of permissions and their related settings Plesk will not sync if the permission is granted.

DNS zone management

Allows the subscriber to manage the DNS zones of their domains.

Note: If this permission is granted, then the DNS service settings are not synced.

Hosting settings management

Allows modifying parameters of the hosting service provided with the subscription: changing hosting account features, setting up custom web server settings, and switching on or off support for programming and scripting languages, custom error documents, and SSL/TLS support. In addition, it allows you to toggle the following permissions: Hosting performance settings management and Common PHP settings management.

Note: If this permission is granted, then the mentioned hosting parameters are not synced.

Common PHP settings management

Allows the subscriber to adjust common PHP settings individually for each website (subdomain) in their subscription.

Note: If this permission is granted, then the common PHP settings are not synced.

PHP version and handler management

Allows customers to select the PHP version and the PHP handler individually for each site.

Setup of potentially insecure web scripting options that override provider’s policy. Allows the subscriber to override the hosting security policy, if it is applied by the provider.

Management of access to the server over SSH (Linux hosting)

Allows the subscriber to access the server shell over SSH under their system user account. Also, lets the subscriber set up such hosting parameter as SSH access to server shell under the subscription’s system user.

Note: If this permission is granted, then the mentioned hosting parameter is not synced.

Management of access to the server over Remote Desktop (Windows hosting)

Allows the subscriber to access the server via Remote Desktop protocol.

Anonymous FTP management

Provides the anonymous FTP service, which lets the subscriber set up a directory shared over FTP protocol and available to anonymous users. A subscription should reside on a dedicated IP address in order to provide this service.

Scheduler management

Allows the subscriber to schedule running of scripts or utilities.

Spam filter management

Allows the subscriber customize filtering settings of the SpamAssassin spam filter.

Antivirus management

Allows the subscriber to change settings of the server-side protection of incoming and outgoing mail from viruses.

Backup and restoration of subscription data using the server storage

Allows the subscriber to back up and restore their websites, and use the storage on the Plesk server for keeping backups.

Backup and restoration of subscription data using an FTP storage

Allows the subscriber to back up and restore their websites, and use external FTP servers for storing their backups.

Backup and restoration of account data using the server storage

Allows the subscriber to back up and restore their websites and account data, and use the storage on the Plesk server for keeping backups.

Backup and restoration of account data using an FTP storage

Allows the subscriber to back up and restore their websites and account data, and use external FTP servers for storing their backups.

Web statistics management

Allows the subscriber to select which Web statistics engine should be used, and whether reports should be accessible via a specific password-protected directory.

Note: If this permission is granted, then the mentioned hosting parameter is not synced.

Log rotation management

Allows the subscriber to adjust the cleanup of processed log files for their sites. Also, allows the subscriber to remove log files.

Note: If this permission is granted, then the Logs & Statistics parameters are not synced.

Access to Application Catalog

Provides the subscriber with access to prepackaged applications that can be installed on websites. If you select this option, be sure to select the PHP support checkbox on the Hosting Parameters tab.

You can view a list of applications available from your provider by doing the following:

  1. Set up your own website by using a plan or a custom subscription that grants access to the Application Catalog.
  2. Go to the Reseller Panel > Subscriptions, and click the domain name. The Customer Panel opens.
  3. In the Customer Panel, go to Applications > All Available Applications.

There is also a page in the Reseller Panel, where you can view and update installed applications: Tools & Utilities > Application Vault.

For instructions on installing applications and license keys, refer to the Customer’s Guide, section Web Applications.

Access to WP Toolkit

Allows the subscriber to manage their WordPress instances using the WP Toolkit. In addition, it allows you to toggle the following permission: WP Toolkit security management.

WP Toolkit security management

Allows the subscriber to manage the WP Toolkit security options for their WordPress instances.

WP Toolkit cloning management

Allows to clone WordPress instances.

WP Toolkit syncing management

Allows to sync WordPress instances.

WP Toolkit auto-updates management

Allows managing the WordPress auto-updates.

Git management

Allows customers to use Git. For details, refer to Git Support.

Ruby support management (Linux hosting)

Allow customers to use Ruby. For details, refer to Ruby Support.

Ruby state management (Linux hosting)

Allows customers to change Ruby state. For details, refer to Ruby Support.

Ruby version management (Linux hosting)

Allow customers to change Ruby version. For details, refer to Ruby Support.

Node.js support management

Allow customers to use Node.js. For details, refer to Using Node.js.

Node.js state management

Allow customers to change Node.js state. For details, refer to Using Node.js.

Domains management

Allows the subscriber to add domains, create websites and set up web forwarding.

Subdomains management

Allows the subscriber to set up additional websites accessible by <subdomain>.<domain> addresses.

Domain aliases management

Allows the subscriber to set up additional alternative domain names for their websites.

Additional FTP accounts management

Allows the subscriber to manage FTP accounts for accessing the subscription’s files and folders.

Java applications management

Allows the subscriber to install Java applications on their websites.

Ability to change mail settings

Allows the subscriber to manage mail server settings for their domains.

Mailing lists management

Allows the subscriber to use mailing lists provided by the GNU Mailman software.

Note: If this permission is granted, then the Switch on mailing lists parameter is not synced.

Hosting performance settings management

Allows the subscriber to adjust performance PHP settings individually for each website (subdomain) in their subscription. In addition, in Plesk for Windows, lets the subscriber set up the limits on bandwidth usage and number of connections to their websites.

Note: If this permission is granted, then the following settings are not synced: PHP performance settings, performance settings for bandwidth usage and the number of connections.

IIS application pool management (Windows hosting)

Provides the subscriber with a dedicated IIS application pool and the means to manage it: enable or disable it, and set up the maximum amount of CPU power that the pool may use.

Note: If this permission is granted, then the Logs & Statistics parameter called Use dedicated pool is not synced.

Additional write/modify permissions management (Windows hosting)

Allows the subscriber to toggle the hosting parameter Additional write/modify permissions. These permissions are required, for example, if subscriber’s web applications use a file-based database (like Jet) located in the root of httpdocs or httpsdocs folder.

When a subscriber turns on the Additional write/modify permission on a subscription, the full access rights are granted to a corresponding Plesk IIS user and an IIS application pool user.

Note that selecting this option might seriously compromise the websites’ security.

Note: If this permission is granted, then the hosting parameter Additional write/modify permissions is not synced.

Hard disk quota assignment

Allows the subscriber to set up the hosting parameter Hard disk quota.

Note: If this permission is granted, then the mentioned hosting parameter is not synced.

Database server selection

Allows subscribers to select a database server for their databases, as opposed to using the default database server. For details about default database servers, see the section Hosting Parameters.

Remote access for database users

Allows subscribers to set up custom remote access control settings. These settings apply to database user accounts. Depending on the database type, Plesk employs either firewall rules or MySQL/MariaDB access control lists. Custom settings are added to existing firewall rules after your approval.

Access to advanced operations: Website Copying

Specifies whether the website copying and maintenance mode are available to the subscriber in the Customer Panel > Websites & Domains > domain name. If denied, the Website Copying link is not available to the subscriber.

Password-protected directories management

Specifies whether the protected directories feature is available to the subscriber in the Customer Panel > Websites & Domains > domain name. If denied, the Password-protected directories link is not available to the subscriber.

Ability to manage additional user accounts

Specifies whether the subscriber can manage additional user accounts on the Customer Panel > Users. If denied, Users section is not available to the subscriber.