How to Add a New Administrator User Safely
WHMCS · Self-help guide
Each staff member should have their own WHMCS administrator account. Do not share one admin login between multiple people. In WHMCS admin, go to the administrator user settings and create a new admin account. Use the staff member’s real name and work email address. Assign them to the correct administrator role so they only have access to the areas they need. For example, billing staff may not need server module settings, and support staff may not need payment gateway settings. Require strong passwords and enable two-factor authentication where possible. Remove admin accounts immediately when staff leave or no longer need access. Review admin activity logs if unusual changes occur.