Add sub-users

Subusers let you give other people (friends, moderators, developers) access to your server, with precise rights. Each one signs in with their own account and only sees what you allow: you never have to share your password.

Invite a subuser

1. Log in to the YorkHost Panel:
   • panel.yorkhost.fr
2. Select your server
3. Go to Management → Subusers
4. Click New subuser
5. Enter the person's email address in User Email. If they don't have an account yet, one is created for them
6. Pick a preset (see below), then adjust the permissions if needed
7. Click Invite

The Server access list then shows each subuser, their number of permissions and their two-factor authentication status (2FA or No 2FA).

Presets

Presets tick a consistent set of permissions in one click:

Preset	What the person can do
Read only	View the console, files, backups, databases, ports, schedules and the activity log, without changing anything
Moderator	Read only, plus sending commands, starting, stopping and restarting the server and creating backups
Developer	Moderator, plus editing files, SFTP, rotating database passwords and managing schedules. No subuser, port or reinstall management
Everything	Every permission you can grant

Available permissions

Permissions are grouped by topic. Each group's checkbox selects them all at once.

Group	Permissions
Console and power	Send commands, Start, Stop, Restart
Files	Create and upload, Browse folders, Read and download, Edit, Delete, Archive and extract, SFTP access
Backups	Create, View, Delete, Download, Restore
Databases	Create, View, Rotate password, Delete, View passwords
Schedules	Create, View, Edit, Delete
Subusers	Invite, View, Edit, Remove
Network	View ports, Add ports, Primary port and notes, Remove ports
Startup	View variables, Edit variables, Change Docker image
Settings	Rename and describe, Reinstall
Activity	View the log

Permissions marked Sensitive give access to all of the server's data or can erase it: downloading or restoring a backup, viewing database passwords, reinstalling the server, changing the Docker image.

You can only grant what you have

You can only grant permissions your own account has. A greyed-out permission means your account doesn't have it.

Edit or remove access

• Edit: opens the Edit access window, to change the preset or the permissions, then Save
• Remove: after confirmation (Remove access), the person immediately loses all access to this server

tip

Only grant the permissions that are needed, and ask your subusers to turn on two-factor authentication on their account (My account).