In this post, we\u2019ll introduce you to WordPress user roles and management. This will include a breakdown of the different user roles, along with some plugins you can use to manage users and roles on your website. Let\u2019s get started!<\/p>\n\n\n\n\n\n
WordPress User Roles<\/h2>\n\n\n\n
To control what users have access to, WordPress uses a Roles system<\/a>. There are six default WordPress user roles \u2013 Administrator<\/em>, Editor<\/em>, Author, Contributor,<\/em> Subscriber,<\/em> and Super Admin<\/em> \u2013 and each has its own privileges and permissions.<\/p>\n\n\n\n Of all the WordPress roles, the Administrator<\/em> role is the most powerful. Its permissions are not at all restricted.<\/p>\n\n\n\n A WordPress Admin can add new users, edit and delete current users, install new plugins and themes, make changes to the site\u2019s settings, and much more. They also have full control over the website\u2019s content. They can add new posts, edit both drafted and published posts, and even delete posts.<\/p>\n\n\n\n The Administrator<\/em> role is often (though certainly not always) held by the site owner exclusively. This ensures that they have full control over the site, including how it runs and the content posted on it. However, that\u2019s not to say that other user roles don\u2019t have the ability to make certain restricted changes.<\/p>\n\n\n\n As the name implies, anyone with the Editor<\/em> role has almost full control over the website\u2019s page and post content. They can add, edit, publish, and delete posts on the website, including those added by other users (such as Authors<\/em> and Contributors<\/em>).<\/p>\n\n\n\n Another major permission the Editor<\/em> role possesses is comments moderation. Any aspects of the site not related to content \u2013 including plugins, themes, and settings \u2013 cannot be affected by editors, nor any user levels below Editor<\/em> (i.e. Author<\/em>, Contributor,<\/em> and Subscriber).<\/em><\/p>\n\n\n\n Permissions held by the Author<\/em> role relate to creating and publishing their own content. Authors can add, edit, publish, and delete their own posts (but not those of other contributors).<\/p>\n\n\n\n Unlike an Editor,<\/em> this WordPress role is unable to moderate comments. However, an Author<\/em> can still view comments.<\/p>\n\n\n\n The WordPress Contributor<\/em> role is popular on websites with user-submitted content (such as Lifehacker<\/a>). While contributors can add and edit their own posts, they cannot publish them. They also cannot upload media files (unlike all of the roles already covered) or moderate comments.<\/p>\n\n\n\n The Subscriber role is the <\/em>most restricted role available, and a Subscriber<\/em> can only gain access to their User Profile<\/em>\u2014no other area of the back end is accessible. Subscribers can change their password, but that\u2019s about it.<\/p>\n\n\n\n This role is most helpful if you want to require users to log in to read restricted content or leave comments.<\/p>\n\n\n\n The Super Admin <\/em>role is a little different, as it\u2019s specifically designed for use on WordPress multisite networks<\/a>. As a Super Admin, you. can oversee and manage all of the sites in the same network. <\/p>\n\n\n\n This role is useful for network administrators, as well as designers who are assigned to multiple sites in the same network. It enables them to move freely among those sites, making necessary updates and changes<\/a>. <\/p>\n\n\n\n We\u2019ve outlined each of the user roles above and the permissions associated with each. However, it\u2019s also important to clarify each role’s management privileges (if any).<\/p>\n\n\n\n The Administrator<\/em> has full management capabilities. They can create and remove users at any time, and edit each specific role. An Administrator<\/em> is the only default role that allows access to the list of user profiles active on the site, as well as any plugins (including WordPress user management plugins).<\/p>\n\n\n\n On a multisite network, the Super Admin<\/em> has the same capabilities for all of the sites on the network. So the Super Admin<\/em> can manage users on all of the network\u2019s websites, while Administrators<\/em> can manage users only on their specific site.<\/p>\n\n\n\n The other roles mentioned \u2013 Editor<\/em>, Author, Contributor,<\/em> and Subscriber<\/em> \u2013 have absolutely no user role management abilities. Users with each of these roles can view their own User Profile<\/em>, but that\u2019s the extent of it.<\/p>\n\n\n\n The management of a website\u2019s users is an important task, and one not to be taken lightly. This is why the privilege is, by default, reserved for Administrators<\/em>. However, the Administrator<\/em> can extend user management capabilities to any user (or role) they want using one of the WordPress plugins mentioned below.<\/p>\n\n\n\n By taking charge of user control, Administrators <\/em>can effectively manage user privileges and permissions. With the help of a user management WordPress plugin, Administrators<\/em> can even create their own roles or customize permissions for each user. This makes the management of a WordPress website \u2013 and its various users \u2013 simpler.<\/p>\n\n\n\n While an Administrator<\/em> has control over user roles in the WordPress back end, the default management and customization capabilities are limited. With plugins, you can expand these capabilities and more easily (and fully) manage the privileges and permissions of each role and user.<\/p>\n\n\n\n The User Role Editor<\/a> plugin is a popular option, with over 600,000 active downloads and a 4.5-star rating. This plugin puts control of all the various functions and permissions for WordPress user roles into an easy-to-navigate interface, which also works with multisite installations. <\/p>\n\n\n\n You can use checkboxes to toggle different permissions on or off for each of your user roles and save the new configurations to your website. This is a free plugin with extra modules available through a pro version that starts at $29 per year<\/a>. <\/p>\n\n\n\n The Members<\/a> plugin is designed to take user roles beyond the native WordPress functionality. With over 200,000 active downloads and a 4.5-star rating, it has a proven track record. The Members plugin also works seamlessly with MemberPress<\/a>, which is useful if you\u2019re running a membership website. <\/p>\n\n\n\n Some of this solution\u2019s key features include the ability to restrict content from access by certain users, assign multiple roles to individual users, and edit what specific roles can do. Additionally, this plugin offers all of its core features in its free version.<\/p>\n\n\n\n WPFront<\/a> is a plugin that is growing in popularity and has a 4.5-star rating in the WordPress Plugin Directory. This tool uses an interface that will be familiar to WordPress users, as it mimics how you already manage posts and pages. <\/p>\n\n\n\n From the Role<\/em> admin page, you\u2019ll be able to add, edit, and delete roles, as well as migrate roles to other websites. While the free version of the plugin has plenty of features available, you can upgrade to the Pro version<\/a> for enhanced options such as multisite support, content restrictions, and custom post type restrictions. <\/p>\n\n\n\n The Remove Dashboard Access<\/a> plugin is a useful option if you have many users on your website, and you want to secure your WordPress admin panel. With this plugin, you can control access to the dashboard by blocking specific user roles. Alternatively, you can allow certain users to access and edit just their user profiles. <\/p>\n\n\n\n This plugin also lets you create a custom login message for increased clarity, and designate a customized redirect URL for any disallowed users. This is a completely free plugin, with active development information available on GitHub<\/a>. <\/p>\n\n\n\n PublishPress Capabilities<\/a> is a WordPress user management plugin with an intuitive, easy-to-use interface. With this plugin, you can easily create and delete user roles, as well as customize the permissions that each role or individual user has:<\/p>\n\n\n\n You can also create custom roles. For example, you could create a Master Author<\/em> role that incorporates permissions from both the Editor<\/em> and Author<\/em> roles. Additionally, you can manage permissions for WooCommerce roles, and make copies and backups to restore or use on other websites.<\/p>\n\n\n\n Using the Capabilities plugin from PublishPress is straightforward. Once you install and activate the plugin<\/a> through your WordPress dashboard, you can access its settings by going to Capabilities <\/em>in your main menu.<\/p>\n\n\n\n There, you can choose the existing role you want to edit in the top-right corner of the screen.<\/p>\n\n\n\n Then you can use the checkboxes to customize all of the capabilities for that role. If you have a WooCommerce shop, be sure to scroll all the way down to find the permissions for your online store as well. Once you have made your selections, click on Save Changes <\/em>and you\u2019re good to go. <\/p>\n\n\n\n To create a new custom user role<\/a> with the Capabilities plugin, you\u2019ll need to first name your new role. Then select Create<\/em> on the right-hand side of the settings page.<\/p>\n\n\n\n Once you do that, you\u2019ll see that your new custom role is now selected in the Select Role to View\/Edit<\/em> field. You\u2019ll also see confirmation that you create your new user role successfully.<\/p>\n\n\n\n Now you can configure the capabilities for your new role by using the checkboxes, and be sure to hit Save Changes <\/em>when you\u2019re done! <\/p>\n\n\n\n Aside from plugins, there are also online services to help you fully manage your users and their permissions. They enable you to take a hands-on approach to user management, and many of these services are highly configurable.<\/p>\n\n\n\n For example, OAuth.io<\/a> enables you to sign up, sign in, and otherwise manage your users\u2019 sessions. With the oAuth.io API connected to your website, you can even update user data and keep track of when each user is logged in and active.<\/p>\n\n\n\n You might also want to check out O<\/a>kta, an authentication system for websites and applications. Similar to oAuth.io, you can sign up and authenticate users. This gives you control over user security and ensures that your users (and website) are protected as well as possible.<\/p>\n\n\n\n Both of these options are great third-party solutions for a necessary and useful website management task.<\/p>\n\n\n\n If simplicity is something that interests you, be sure to take a look at WP Engine\u2019s managed hosting plans for WordPress<\/a>. These plans ensure that your site is always up-to-task, and with 24\/7 professional WordPress hosting<\/a> support, you know that WP Engine has always got your back!<\/p>\n","protected":false},"excerpt":{"rendered":" As the owner of your website, you may feel compelled to do everything yourself, including installing plugins, managing site settings, creating content, and moderating comments. However, this approach can quickly become overwhelming and is ultimately unsustainable. Fortunately, WordPress has a feature known as User Roles, which enables you to create and assign users to specific…<\/span><\/span><\/p>\n","protected":false},"author":1,"featured_media":149444,"template":"","resource-topic":[901],"resource-role":[895,899],"resource-type":[916],"class_list":["post-33585","resource","type-resource","status-publish","has-post-thumbnail","hentry"],"yoast_head":"\n![\"WordPress](\"https:\/\/wpengine.com\/wp-content\/uploads\/2018\/01\/WordPress_User_Management.png\")
<\/figure>\n\n\n\nAdministrator<\/h3>\n\n\n\n
Editor<\/h3>\n\n\n\n
Author<\/h3>\n\n\n\n
Contributor<\/h3>\n\n\n\n
Subscriber<\/h3>\n\n\n\n
Super Admin<\/h3>\n\n\n\n
WordPress User Role Management<\/h2>\n\n\n\n
WordPress User Control<\/h2>\n\n\n\n
WordPress User Management Plugins<\/h2>\n\n\n\n
User Role Editor<\/a><\/h3>\n\n\n\n
Members \u2013 Membership & User Role Editor Plugin<\/a><\/h3>\n\n\n\n
WPFront User Role Editor<\/a><\/h3>\n\n\n\n
Remove Dashboard Access<\/a><\/h3>\n\n\n\n
PublishPress Capabilities: Manage WordPress Permissions and Edit User Roles<\/a><\/h3>\n\n\n\n
Customize an Existing User Role<\/h2>\n\n\n\n
Create a New Custom User Role<\/h2>\n\n\n\n
Other User Management Systems<\/h2>\n\n\n\n
![\"wordpress](\"https:\/\/wpengine.com\/wp-content\/uploads\/2018\/01\/user-management-system.jpg\")
<\/figure>\n\n\n\n![\"okta](\"https:\/\/wpengine.com\/wp-content\/uploads\/2018\/01\/usermanagementsystem1.jpg\")
<\/figure>\n\n\n\nKeep Learning with WP Engine<\/h2>\n\n\n\n