How can we improve WHMCS?

Share, discuss and vote for what you would like to see added to WHMCS

  1. Home
  2. Ideas
  3. Clients
  4. Restrict users access to certain products

Restrict users access to certain products

  • Santiago Lope shared this idea 5 years ago
  • Clients
  • 4 Comments


61 Votes
Login to Vote
I'm happy with the new users and client accounts system update. We can choose what permissions each user has. However, right now we can't restrict the users access to only certain products, and I think it would be really useful. Most of the times you don't want the users to have access to all the products. Thank you for taking this idea into consideration!

4 Comments

Login to post a comment.

Robert Mihalik commented 15 hours ago
+1 — this is a real blocker for us, and the lack of it actively pushes customers toward workarounds that are worse for everyone.

Concrete scenario we hit regularly as a hosting provider:

A client owns a hosting package with several domains/services under one account. They want to invite a collaborator (developer, employee, family member) and give them control over one specific service — not the whole account.

Today's Users & Permissions system is all-or-nothing per category: "Manage Products & Services" means all services, alongside visibility into everything else the client owns. So the client's realistic options are:

1. Share the account credentials directly (terrible for security, kills 2FA and audit trails), or
2. Split the service out into a separate client account with a separate DA/cPanel account — which means migration work, a second invoice relationship, and friction that shouldn't be necessary just to delegate access.

What's needed is simple in concept: when inviting a user, let the account owner optionally scope the invitation to selected services/domains. Permissions within that scope can stay exactly as they are today — the missing piece is only the per-service filter, enforced at the API/controller level (not just hidden in the UI).

This is a standard capability in basically every modern SaaS ("share this project, not my whole workspace"), and resellers/agencies expect it. Five years "under review" for something with this many votes deserves at least a roadmap statement.
Aimee Jones commented 3 weeks ago
Great update overall—adding product‑level access controls would make it even https://www.nicview.com.co more flexible and secure for managing user permissions.
sitesme commented 4th October 24
I would like to see this implemented too.

Some of my clients will have to create multiple accounts (one email for each) to separate the services which is a nuisance.
Alex McKerns commented 1st March 22
Hi Santiago,

We are looking to achieve the same result over here at Enter.Net. Wondering if you were ever able to find a solution for this? Specifically, we're looking to assign access to "Project Management" while restricting access to client profiles, invoices, etc...

Thanks!

--
Alex McKerns - Enter.Net, Inc.