How to create additional Plesk administrator accounts with fewer permissions on Plesk for Linux via CLI?

Question

How to create additional Plesk administrator accounts with fewer permissions on Plesk for Linux via CLI?

Answer

1. Connect to the server via SSH

2. Create an additional Plesk administrator account with Restricted Mode / Custom View enabled (Check Official Plesk documentation for more details):

   # plesk bin admin_alias --create aliasadmin -passwd password -contact "Additional Admin" -email noreply@example.com -enable_admin_restrictions true

   Note: -enable_admin_restrictions true enables restricted mode in Tools & Settings > Restricted Mode Settings logged in as the additional administrator. At the same time the additional administrator can turn it off from their own settings in Tools & Settings > Restricted Mode Settings.

   OR

   # plesk bin admin_alias --create aliasadmin -passwd password -contact "Additional Admin" -email noreply@example.com -force_admin_restrictions true

   Note: -force_admin_restrictions true enables restricted mode in Tools & Settings > Additional Administrator Accounts and locks it. The additional administrator cannot turn it off. Only the main administrator can change it from Tools & Settings > Additional Administrator Accounts > Edit.

3. Customize the restrictions to the Plesk administrators by editing the Restricted Mode / Custom View settings. Here some examples, check Plesk Obsidian Documentation - Administrator Panel Preferences for more:

   • Prohibits adjusting Plesk firewall settings in Restricted Mode / Custom View:

     # plesk bin admin --update -manage_server_firewall true

   • Prohibits performing backups in Restricted Mode / Custom View:

     # plesk bin admin --update -manage_server_backup false

   • Allows managing subdomains in Restricted Mode / Custom View:

     # plesk bin admin --update -manage_subdomains true