Permissions (located at **Service Plans** \> select a plan \> **Permissions** tab) define what privileges and services are provided with the plan’s subscriptions.
**DNS zone management**
Allows the subscriber to manage the DNS zones of their domains.
.\* addresses.
**Domain aliases management**
Allows the subscriber to set up additional alternative domain names for their websites.
**Additional FTP accounts management**
Allows the subscriber to manage FTP accounts for accessing the subscription’s files and folders.
**Java applications management**
Allows the subscriber to install Java applications on their websites.
**Ability to change mail settings**
Allows the subscriber to manage mail server settings for their domains.
**Mailing lists management**
Allows the subscriber to use mailing lists provided by the GNU Mailman software.
Note
If this permission is granted, then the DNS service settings are not synced.
**Hosting settings management**
Allows modifying parameters of the hosting service provided with the subscription: changing hosting account features, setting up custom web server settings, and switching on or off support for programming and scripting languages, custom error documents, and SSL/TLS support. In addition, it allows you to toggle the following permissions: **Hosting performance settings management** and **Common PHP settings management**.
Note
If this permission is granted, then the mentioned hosting parameters are not synced.
**Common PHP settings management**
Allows the subscriber to adjust common PHP settings individually for each website (subdomain) in their subscription.
Note
If this permission is granted, then the common PHP settings are not synced.
**PHP version and handler management**
Allows customers to select the PHP version and the PHP handler individually for each site.
**Setup of potentially insecure web scripting options that override provider’s policy.** Allows the subscriber to override the hosting security policy, if it is applied by the provider.
**Management of access to the server over SSH** (Linux hosting)
Allows the subscriber to access the server shell over SSH under their system user account. Also, lets the subscriber set up such hosting parameter as **SSH access to server shell under the subscription’s system user**.
Note
If this permission is granted, then the mentioned hosting parameter is not synced.
**Management of access to the server over Remote Desktop** (Windows hosting)
Allows the subscriber to access the server via Remote Desktop protocol.
**Anonymous FTP management**
Provides the anonymous FTP service, which lets the subscriber set up a directory shared over FTP protocol and available to anonymous users. A subscription should reside on a dedicated IP address in order to provide this service.
**Scheduler management**
Allows the subscriber to schedule running of scripts or utilities.
**Spam filter management**
Allows the subscriber customize filtering settings of the SpamAssassin spam filter.
**Antivirus management**
Allows the subscriber to change settings of the server-side protection of incoming and outgoing mail from viruses.
**Backup and restoration of subscription data using the server storage**
Allows the subscriber to back up and restore their websites, and use the storage on the Plesk server for keeping backups.
**Backup and restoration of subscription data using an FTP storage**
Allows the subscriber to back up and restore their websites, and use external FTP servers for storing their backups.
**Backup and restoration of account data using the server storage**
Allows the subscriber to back up and restore their websites and account data, and use the storage on the Plesk server for keeping backups.
**Backup and restoration of account data using an FTP storage**
Allows the subscriber to back up and restore their websites and account data, and use external FTP servers for storing their backups.
**Web statistics management**
Allows the subscriber to select which Web statistics engine should be used, and whether reports should be accessible via a specific password-protected directory.
Note
If this permission is granted, then the mentioned hosting parameter is not synced.
**Log rotation management**
Allows the subscriber to adjust the cleanup of processed log files for their sites. Also, allows the subscriber to remove log files.
Note
If this permission is granted, then the Logs & Statistics parameters are not synced.
**Access to WP Toolkit**
Allows the subscriber to manage their WordPress instances using the WP Toolkit. In addition, it allows you to toggle the following permission: **WP Toolkit security management.**
**WP Toolkit security management**
Allows the subscriber to manage the WP Toolkit security options for their WordPress instances.
**WP Toolkit cloning management**
Allows to clone WordPress instances.
**WP Toolkit syncing management**
Allows to sync WordPress instances.
**WP Toolkit auto-updates management**
Allows managing the WordPress auto-updates.
**Git management**
Allows customers to use Git. For details, refer to Git Support.
**Ruby support management** (Linux hosting)
Allow customers to use Ruby. For details, refer to Ruby Support.
**Ruby state management** (Linux hosting)
Allows customers to change Ruby state. For details, refer to Ruby Support.
**Ruby version management** (Linux hosting)
Allow customers to change Ruby version. For details, refer to Ruby Support.
**Node.js support management**
Allow customers to use Node.js. For details, refer to **Using Node.js**.
**Node.js state management**
Allow customers to change Node.js state. For details, refer to **Using Node.js**.
**Domains management**
Allows the subscriber to add domains, create websites and set up web forwarding.
**Subdomains management**
Allows the subscriber to set up additional websites accessible by *\
Note
If this permission is granted, then the Switch on mailing lists parameter is not synced.
**Hosting performance settings management**
Allows the subscriber to adjust performance PHP settings individually for each website (subdomain) in their subscription. In addition, in Plesk for Windows, lets the subscriber set up the limits on bandwidth usage and number of connections to their websites.
Note
If this permission is granted, then the following settings are not synced: PHP performance settings, performance settings for bandwidth usage and the number of connections.
**IIS application pool management** (Windows hosting)
Provides the subscriber with a dedicated IIS application pool and the means to manage it: enable or disable it, and set up the maximum amount of CPU power that the pool may use.
Note
If this permission is granted, then the Logs & Statistics parameter called **Use dedicated pool** is not synced.
**Additional write/modify permissions management** (Windows hosting)
Allows the subscriber to toggle the hosting parameter **Additional write/modify permissions**. These permissions are required, for example, if subscriber’s web applications use a file-based database (like Jet) located in the root of `httpdocs` or `httpsdocs` folder.
When a subscriber turns on the **Additional write/modify permission** on a subscription, the full access rights are granted to a corresponding Plesk IIS user and an IIS application pool user.
Note that selecting this option might seriously compromise the websites’ security.
Note
If this permission is granted, then the hosting parameter **Additional write/modify permissions** is not synced.
**Hard disk quota assignment**
Allows the subscriber to set up the hosting parameter **Hard disk quota**.
Note
If this permission is granted, then the mentioned hosting parameter is not synced.
**Database server selection**
Allows subscribers to select a database server for their databases, as opposed to using the default database server. For details about default database servers, see the section Hosting Parameters.
**Remote access for database users**
Allows subscribers to set up custom remote access control settings. These settings apply to database user accounts. Depending on the database type, Plesk employs either firewall rules or MySQL/MariaDB access control lists. Custom settings are added to existing firewall rules after your approval.
**Access to advanced operations: Website Copying**
Specifies whether the website copying and maintenance mode are available to the subscriber in the Customer Panel \> **Websites & Domains** \> domain name. If denied, the **Website Copying** link is not available to the subscriber.
**Password-protected directories management**
Specifies whether the protected directories feature is available to the subscriber in the Customer Panel \> **Websites & Domains** \> domain name. If denied, the **Password-protected directories** link is not available to the subscriber.
**Ability to manage additional user accounts**
Specifies whether the subscriber can manage additional user accounts on the Customer Panel \> **Users**. If denied, **Users** section is not available to the subscriber.