Skip to main content

Rights and Roles




Full qualified domain name


showkey Show invitation access key

Get a list of active and pending grants. 

Returns lines in the following format (space-separated):

invitation <nr> <scope> <key> domain <domain-name> <role> - - - <invitee-email> <nick-name> grant <nr> <scope> domain <domain-name> <role> <inviter-username> <invitee-username> <invitee-userid> <invitee-email> <nick-name> 


<nr> record number
<scope>    Grant/Invite id (used to uniquely identify records for revocation)
<key> Invitation access key, present only when "showkey" is non-zero; it has meaning only for pending invitations, and always is "-" for grants
<domain-name> domain name (identical to domain in request)
<role> one of @admin/@billing/@tech/@creator
<inviter-username> your username (owner of the domain)
<invitee-username> username of invited user
[leave empty] user-ID of invited user  
<nick-name> name or comment you want to assign to this role


Request parameters:

name value


domain Full qualified domain name



Email of user to be invited to accept a role for 'domain'



Role offered (@admin/@billing/@tech/@creator)



receiving user id as shown on - also conforms to reseller-id



Name or comment for this role/grant for later identification (defaults to email)


With this request you can assign 'Roles' (permissions) of domains to other users. The special role "creator" is an equivalent to an internal transfer of that domain to another user. In this case, the domain is assigned to the receiving account's portfolio, including all rights and permissions on this domain.

There are two variants to use this functionality: If the client-uid ( user account id) is given, and the client-uid matches the associated user's email address in our system, the role is applied immediately - there will be no request for confirmation on the receiver's side. In case the client-uid is not given, but only the email address, the transaction has to be acknowledged by the receiving user. For this, he will get an email ('invitation'), containing a link and a key. Either the link has to be clicked, or the key has to be applied using (=> Transfer). This can also be used for users which do not yet have a account.

Returns status only (ok or not). Email is sent if request was succesfull.



domain full qualified domain name


Role to be revoked from domain (@admin/@billing/@tech/@creator)


identifier from 'grants-list' request


type of the record to revoke - "grant" or "invitation"

Deletes an issued grant (permission) of a domain, or a pending invitation for a grant. 

Returns status only (ok or not). Email is sent if request was succesfull.