Users & Roles

Users & Roles

Every person who signs in to VinzaPanel has a panel user. Hosting customers are users too: each one gets its own Linux account, home directory and resources. This page covers creating users, roles and permissions, suspending and terminating accounts, and signing in as a customer to help them.

Manage users at Server → Users. The page lives under your panel's secret admin path (/<secret>/users/).

Roles

The public /login/ page refuses administrator accounts; admins always use the secret login URL printed by the installer.

You can only assign roles up to your own: an Admin can create Admins and Users, but not Super Admins, and cannot edit, suspend or delete a Super Admin.

Groups and permissions

Access is role-based. Each role maps to a group — panel_admin for Admin and panel_user for User; Super Admins have every permission. Go to Administration → Groups to change what a role can access, or use Permissions on a single user to grant or revoke individual panel permissions for that account only.

Create a user

1. On Server → Users, click New User.
2. Enter a Username (it cannot be changed later — it is permanently tied to the Linux system account), email, first and last name.
3. Type a Password twice, or click Generate safe password.
4. Choose the Role and a Hosting Plan. No Plan means no limits are enforced; see Hosting Plans.
5. If you have connected other servers, choose the Server for a hosting account (role User). Its Linux user, websites and databases are created there. See Vinza Server.
6. Click Create User. The confirmation shows the panel username, the Linux user and the system password — copy them for your welcome email.

Every new account gets a Linux user with the same password and MariaDB access. If a user has no home directory or Linux user (for example after an import), open it and use Set Up Home Directory or Create Linux User.

Edit a user

Click Edit on a user to change email, name, role, hosting plan or password (leave the password blank to keep it). The Account Status toggle switches an account between active and inactive; you can't change your own status. Re-activating an account counts against your licence limit.

Suspend and unsuspend

Suspend an account when, for example, an invoice is unpaid:

1. Open the user and find Suspension.
2. Optionally enter a Reason (e.g. unpaid invoice) and click Suspend account.

Suspending blocks the panel and API login and, on every server that holds the account's resources:

• its websites show a “suspended” page (HTTP 503) and certificates still renew; on OpenLiteSpeed the sites are taken offline instead;
• its apps and PHP-FPM pools are stopped;
• its shell (SSH), FTP and database logins are locked and its processes stopped;
• mailbox logins are refused, but incoming mail is still delivered.

Unsuspend puts back exactly what was changed. If a step fails, the page lists it — use Retry suspend.

Terminate an account

Terminate account removes a customer completely. Type the username to confirm. The panel then, in the background:

1. suspends the account;
2. takes a final backup of its home directory, every database and every mailbox (kept 30 days);
3. deletes its websites with their files, databases, domains, mail, FTP accounts and crontab;
4. deletes the panel user and its Linux user.

If the backup fails, nothing is deleted. A failed job can be resumed with Retry termination. You can tick Skip the final backup, but then the data cannot be recovered. Recent terminations are listed on the Users page under Account terminations (last 30 days).

Login As (impersonation)

To see the panel exactly as a customer does, open their user and click Login As. You are signed in as that user and a banner shows Impersonating <user> with your original account. Click Exit Impersonation to return.

• Only Admins and Super Admins can do this, and only for accounts with the User role — never for other administrators or yourself.
• The customer does not receive a new-login email.

Move an account to another server

With connected servers, Move to another server on a hosting account copies its home, websites, databases, certificates, crontab and FTP accounts to another server and points its websites and DNS there. See Vinza Server for details.

Housekeeping

• Scan Storage measures every user's home directory and refreshes the Disk column.
• Scan Home Dirs finds directories in /home/ that belong to no panel user; you can compress them to .tar.gz and then delete the original.

Security tips

• Turn on two-factor authentication for every admin — see Two-Factor Authentication.
• After 5 wrong passwords an account is locked for 30 minutes.
• Review sign-ins and actions in Activity Log and Administration → Audit Log.