Managing WordPress User Roles Advanced

This article shows you how to manage advanced WordPress user roles, set custom permissions, and control what different users can do on your website.

Understanding WordPress User Roles

WordPress comes with five built-in user roles. Each role has different permissions (called "capabilities" in WordPress):

• Super Admin - Only exists on multisite networks, controls everything
• Administrator - Full control over the website
• Editor - Can publish and manage posts and pages
• Author - Can publish and manage their own posts only
• Subscriber - Can only read content and manage their profile

For most Irish businesses, these basic roles work fine. But sometimes you need more control over what people can access.

Creating Custom User Roles

To create custom roles, you'll need a plugin. The most straightforward option is "User Role Editor".

1. Go to your WordPress admin dashboard
2. Click Plugins → Add New
3. Search for "User Role Editor"
4. Install and activate the plugin
5. Go to Users → User Role Editor
6. Click Add Role
7. Enter a role name (like "Shop Manager" or "Content Writer")
8. Copy capabilities from an existing role as a starting point
9. Tick or untick the permissions you want this role to have
10. Click Add Role

Setting Specific Permissions

WordPress permissions are very detailed. Here are common ones you might want to control:

Content Management:

• edit_posts - Can edit posts
• publish_posts - Can publish posts (not just save drafts)
• delete_posts - Can delete posts
• edit_pages - Can edit pages
• edit_others_posts - Can edit posts by other users

Media and Files:

• upload_files - Can upload images and documents
• edit_files - Can edit theme and plugin files (dangerous)

User Management:

• create_users - Can add new users
• edit_users - Can modify user accounts
• delete_users - Can remove users

Settings and Plugins:

• manage_options - Can change WordPress settings
• install_plugins - Can add new plugins
• activate_plugins - Can turn plugins on/off

Common Business Scenarios

Scenario 1: Content Writer Role You want someone to write blog posts but not publish them immediately.

• Base on "Author" role
• Remove publish_posts capability
• Keep edit_posts and upload_files

Scenario 2: Shop Assistant Role For someone managing products but not site settings.

• Base on "Editor" role
• Remove manage_options
• Add eCommerce-specific capabilities if using WooCommerce

Scenario 3: Social Media Manager Someone who updates specific pages but shouldn't access admin areas.

• Base on "Author" role
• Add edit_pages but not edit_others_pages
• Remove access to plugins and settings

Assigning Roles to Users

1. Go to Users → All Users
2. Click Edit under the user's name
3. In the Role dropdown, select your custom role
4. Click Update User

To change multiple users at once:

1. Tick the checkboxes next to user names
2. In the Bulk Actions dropdown, select Change role to...
3. Choose the new role
4. Click Change

Testing User Roles

Always test new roles before giving them to real users:

1. Create a test user account
2. Assign your custom role
3. Log out of your admin account
4. Log in as the test user
5. Check what they can and cannot access
6. Adjust permissions if needed

For more basic user management, see Managing WordPress Users and Permissions.

If you're still stuck with user role management, contact Web60 support and we'll help you set up the right permissions for your team.

FAQ

Q: Can I have unlimited custom user roles?

A: Yes, WordPress doesn't limit how many custom roles you can create. However, too many roles can make user management confusing.

Q: What happens if I delete a custom user role?

A: Users with that role will lose access to your website until you assign them a new role. WordPress will show them as having "No role for this site".

Q: Can users have multiple roles at the same time?

A: By default, no. Each user can only have one role. Some plugins allow multiple roles, but this can cause permission conflicts.

Q: Do custom roles work with all WordPress themes and plugins?

A: Most themes and plugins respect WordPress user roles. However, some plugins add their own permission systems that might need separate configuration.

Q: Can I export custom roles to another website?

A: Yes, most user role plugins include export/import features. You can save your role settings and apply them to other WordPress sites.

Q: What's the difference between capabilities and roles?

A: A role is a collection of capabilities. For example, the "Editor" role includes capabilities like "edit_posts", "publish_posts", and "upload_files".

Q: Should I give Administrator access to employees?

A: No, unless they need full control over your website. Administrator access includes the ability to install plugins, change themes, and delete your entire website.