Hosting Controller version 10 is not only a new version but a new perspective. With many other major enhancements, user structure of HC10 depicts a new hierarchy. Unlike previous versions, where there were only three types of users Host Administrator, Reseller and Webadmin; this new version proffers an N-tier user structure. Various types of user accounts offered by HC10 are shown below:

Global Admin is the top most user in the Hosting Controller user hierarchy. It’s a kind of super admin with full user and server rights and privileges. It can have N-level of Customers beneath it and at the same time can deputize various tasks to subordinate Staff Members.
Customers are the end beneficiaries of the panel and are the subscribers utilizing the various services offered by the Service Provider. As the services offered can be a mix of both on-premises and cloud services these subscribers may assume the role of Value-Added Resellers (VARs) or end clients. Therefore they are further classified into:
Hosting Controller presents the facility of an N-tier user architecture to its customer base. This means that Resellers can further have Sub-Resellers beneath them and this chain can extend all the way down to the Nth level.
As the name implies Staff Members represent various users/departments within an organization. Hosting Controller allows the delegation of administrative tasks to relevant users/departments within a single organization. Every admin is confined to his own set of rights and privileges and may not overstep his authority. As an example a Billing Sub-admin may only perform tasks related to billing and finance whereas a Provisioning Sub-admin can only provision websites, mail domains, mailboxes etc.
The user created with this role has all the privileges of a Global Admin. It can accomplish anything a Global Admin can. A Global Sub-admin is available only for a Global Admin. This role is useful in situations where Global Admin has to delegate full admin rights to someone for a specific task such as trouble shooting an issue or for a limited period of time.
Server Sub-admin is someone who manages Hosting Controller servers. A Server Sub-admin knows all server configurations and their credentials. If server credentials change for some reason, the Server Sub-admin can update them in the panel. Server Sub-admin can only exist under Global Admin.
A Provisioning Sub-admin is responsible for provisioning tasks such as creating websites, virtual machines etc. The role does not have to necessarily know the server details and their configurations and that is the reason it has been kept separate from a Server Sub-admin. However in real life scenarios, you may at times find both Provisioning Sub-admin and Server Sub-admin to be the same person. Provisioning Sub-admins can exist under all levels (Global Admin, Resellers and Clients).
A Billing Sub-admin is exclusively a finance role. It keeps the record and manages invoices, tax history and payments etc of an organization.
Hosting Controller's scheduled tasks are run under API Admin. It cannot login to the panel or do anything else. It has rights only to endpoints/actions related to scheduled tasks e.g. create virtual machines, sync resources etc. Learn more about API Admin.
The responsibility of an Organization Sub-admin is to manage Exchange organizations. It can manage more than one Exchange organizations. It can perform any action on assigned organizations such as create mail domains, mailboxes, contacts, public folders etc. but cannot add new organizations or delete any.