You can either go ahead over WHM –> Exim Configuration Manager –> Apache SpamAssassin Options –> Apache SpamAssassin™: Forced Global ON set to ON
or simply touch a file:
touch /etc/global_spamassassin_enable
Now you have got SpamAssassin enabled for all users with default score 5
The default 5 score can be overwritten over by a user via /home/USER/.spamassassin/user_prefs file