When someone else — a webmaster, a web design agency, a coworker — needs to manage your server, your hosting or your domains, **never share your password**. The Manager lets you invite them by email with their own user, decide exactly what they can access, and revoke it instantly when it is no longer needed.

:::tip
**Were you sent this article?** Your webmaster or technical provider probably needs access to your server, your hosting account or your domains. Follow the steps in the **"How to grant access"** section: you only need their email address and to decide which services to grant. It takes less than a minute.
:::

## Types of access

When inviting, you choose the scope of the access:

- **Specific services only** (recommended for a webmaster): you select which VPS, IP subnets, hosting accounts (cPanel or WHM reseller) and domains they can see and manage. On those services they can operate in full detail — on a VPS: restart, reinstall, resize, backups, firewall, console; on a hosting account: log in to cPanel/WHM, email, domains and reseller resources; on a domain: DNS, DNSSEC, contacts, transfer lock and renewal — but they cannot see the rest of your account: no billing, no balance, none of your other services, and they cannot order or cancel services. If you grant them any domain, they will also see your domain contact book, which is needed to assign the registrant and contacts.
- **Global access**: they see and manage the whole account just like you: every service, creating new servers, billing, etc. Reserve it for people you fully trust.

In addition, the **"Can manage accesses"** switch lets the invited person invite others in turn (for example, an agency onboarding its own technicians), always with a scope equal to or smaller than their own.

:::info
Billable actions performed by the invited person on their services (resizing a VPS, purchasing backups or extras, upgrading reseller resources, renewing a domain) are charged to the account owner's balance. Ordering new services and cancelling them remains reserved for the owner and global accesses.
:::

## How to grant access (account owner)

1. Log in at [manager.ginernet.com](https://manager.ginernet.com).
2. In the sidebar, open **Accesses**.
3. Under **"Invite a user"**, enter the person's **email**.
4. Choose the scope: **Global access** or **Specific services only** (tick the relevant VPS, subnets, hosting accounts or domains).
5. If you want them to onboard their own team, enable **"Can manage accesses"**.
6. Click **Send invitation**.

The invitation stays **"Pending acceptance"** until the person accepts it from their inbox; you can resend or cancel it at any time and the link expires on its own. **No account is created and no access is granted until the invitation is accepted.**

## What the invited person will see

1. They receive an email stating exactly which scope is granted, with a link to review the invitation.
2. If they don't have a Manager account, they create it right then (their own name and password); if they already have one, they just log in with that email and accept. The same account can access several companies and switch between them with the client selector.
3. Once inside, they will only see what you granted: with scoped access only their services appear, and the billing and account sections are not shown at all.

## If you are the webmaster: what to ask your client

Send this article to the service owner and provide them with:

- Your **email address** (the one you want to work with).
- Which **services** you need access to (servers, hosting accounts or domains); or, if you will order new services on their behalf, let them know you need **global access**.
- If your company has several technicians, ask them to enable **"Can manage accesses"**: that way you can invite your colleagues yourself, each with their own user and limited to the same services, without bothering your client again.

## Ongoing management

From **Accesses**, the owner can at any time:

- See the scope of each access (badges **"Whole account"** or **"N services"**, with the list on hover).
- **Edit the scope**: add or remove services, or switch between global and scoped.
- **Revoke**: cuts the access instantly, but keeps the record so it can be reactivated in one click.
- **Remove**: deletes the link entirely (a new invitation would be needed to restore it).

:::warning
Revoking a manager's access, or reducing their scope, cascades to every access that manager has delegated and voids their pending invitations.
:::