Reseller Guide

A reseller sells hosting under their own brand on a Sahaab server. This guide explains what resellers can do, and what each privilege means.

Administrators: to create resellers and set their limits, see Resellers in the Admin guide.

Resellers use the admin panel:

Open https://server-hostname:2087 (your administrator gives you the address).
Sign in with your reseller username and password.

You see only your own customers, packages, feature lists and DNS zones. Server-wide pages (firewall, services, updates and so on) belong to the administrator.

Protect your login: go to Account → Two-Factor Auth and turn on two-factor sign-in. Change your password and language in Account → Password & Language.

Depending on your privileges, you see these pages:

Menu	Pages
Dashboard	Your accounts, domains and recent tasks
Accounts	List Accounts, Create Account, Packages, Feature Lists, Resource Usage
Websites	WordPress Sites, DNS Zones, Daily Snapshots, Full Backups
Email	Message Customers
Other	Task Queue, Branding
Account	Two-Factor Auth, API Tokens, Webhooks, Support Tickets, Password & Language

A page you have no privilege for is hidden from your menu. If you open it by address, it is refused.

Your limits

The administrator sets three limits for you:

Max accounts: how many accounts you can have.
Disk allocation: the total disk space you can hand out.
Bandwidth allocation: the total monthly bandwidth you can hand out.

0 means unlimited. The disk and bandwidth of the packages of all your accounts are added up. When you create an account, Sahaab checks that it fits. You may see one of these messages:

"Account limit reached." You have the maximum number of accounts.
"Not enough disk space left in your reseller allocation." Choose a smaller package or ask your administrator for more.
"Not enough bandwidth left in your reseller allocation."
"Your reseller plan does not allow packages with unlimited disk." (or bandwidth) When you have an allocation, your packages need a fixed size.

Privileges

Your administrator chooses what you may do. Listing your own accounts and their usage is always allowed. Privileges apply in the admin panel and in the APIs (your billing system).

Privilege	What it allows
Create accounts	Open Create Account and create new hosting accounts.
Terminate accounts	Permanently delete an account with Terminate account.
Suspend and unsuspend accounts	Stop an account's websites, email and cron jobs, and start them again.
Modify accounts (package, contact email, domain, username)	Change an account's package or contact email, change its main domain, or rename it.
Change account passwords	Set a new password for a customer.
Log in to customers' control panels	Use Log in / Log in to Control Panel to open a customer's panel as them. In a billing system, this is the customer's sign-in button.
Create and edit own packages	Add, edit and delete your own packages.
Feature lists	Create and edit your own feature lists (which tools your customers get).
Edit DNS zones	Open DNS Zones and change the records of your customers' zones, including DNSSEC.
Backups and snapshots	Open Daily Snapshots and Full Backups for your accounts: make backups and restore them.
Malware scanner	Use the Malware Scanner for your accounts (Security → Malware Scanner).
Email customers	Use Message Customers.
Branding	Set your own brand for your customers' control panels.
API tokens (billing systems)	Create API tokens to connect your billing system.
WordPress sites	See WordPress Sites: every WordPress site of your customers.

Resellers created before privileges existed keep every privilege.

Packages

Go to Accounts → Packages → Add Package. Set a name, the limits (0 = unlimited) and optionally a feature list and PHP version. See Create a package for what each limit means.

You see your own packages, and the administrator's packages marked as shared with resellers ("shared by the administrator"). You can put accounts on a shared package but not change or delete it — so even without the packages privilege, you can create accounts on the packages the administrator shares.
Shell (SSH) access in a package can only be set by the administrator.
If you lose the packages privilege, your existing packages keep working.

Feature lists

Go to Accounts → Feature Lists → Add feature list. Tick the tools your customers should get, then choose the list in a package. A tool left out disappears from your customers' menu. A package without a list includes every tool. See Choose the tools with feature lists.

Create and manage accounts

Go to Accounts → Create Account.
Enter the Domain, Username, Password and Contact email.
Choose one of your packages.
Click Create.

Open List Accounts and click Manage to change, suspend, rename or terminate an account. Each action needs its privilege. Only the administrator can move an account between resellers.

Resource Usage

Accounts → Resource Usage shows each of your accounts' disk use (files, mail and databases) and this month's traffic against its limits.

DNS and your own nameservers

Websites → DNS Zones lists the zones of your customers. Click Edit to add or remove records.

You can have your own nameservers, such as ns1.your-brand.com and ns2.your-brand.com. Your customers' zones then use them, so your customers never see the server's names.

To set them up:

Ask your administrator to enter your nameservers in your reseller settings.
At your domain registrar, create child nameservers (glue records) for ns1 and ns2 with the server's IP address. If your domain is hosted on this server, its address records are added automatically.
New accounts use your nameservers at once. The administrator can also apply them to your existing zones.

Backups and snapshots

Daily Snapshots: every night each account is copied. Choose an account and click Snapshot now, or click Restore… next to a snapshot to restore files, databases or email.
Full Backups: choose an account and click Create backup. Download, restore or delete backups from the list.

The schedule and storage settings belong to the administrator.

WordPress Sites

Websites → WordPress Sites lists your customers' WordPress sites with their version, pending updates and security settings.

Message Customers

Go to Email → Message Customers. Choose All customers, Active customers only or Customers on a package…, write a subject and message, and click Send. Only your own customers receive it.

Your own branding

Go to Branding. Set your company name, logo, main colour, support email, help link, login message and footer. Your customers see your brand in their control panel. Empty fields use the server's branding.

Connect your billing system

Go to Account → API Tokens.
Enter a token name and click Create token. Copy the token; it is shown only once.
In your billing system, add the server:
WHMCS: download the module from the same page (Download the WHMCS module), then add a server with module "Hosting Panel", port 2087 with SSL, and the token in "Access Hash".
Blesta, HostBill and others: use the standard hosting control panel module. Hostname: the server, port 2087 with SSL. Username: your reseller username. API token: the one you created.
In each product, enter the name of one of your packages exactly as it is in Sahaab.
Ask your administrator to add your billing server's IP address to the firewall allow list.

What the billing system can do depends on your privileges. For example, without Terminate accounts, the billing system cannot remove accounts either. See the API reference.

Support tickets

Your customers' tickets come to you, under Support Tickets. You get an email for each new ticket and reply. Open a ticket to answer it; the customer gets an email. Click My tickets to the administrator to ask your administrator for help yourself.

Webhooks

Account → Webhooks sends your billing or chat system a signed message when something happens to one of your accounts. See Webhooks.

The Task Queue

Every change (creating an account, issuing a certificate) runs as a task. Task Queue shows your tasks and whether they are Queued, Running, Done or Failed. If a task failed, tell your administrator.