Lesson 14 of 50
28% Complete
28%

WordPress Users and Roles

Learn how to create user accounts, assign roles, manage permissions, and control who can access different features of your WordPress website.

Learning Objective: Understand WordPress user roles, create user accounts, edit user profiles, and assign suitable permissions to different users.

1. What Are Users in WordPress?

A WordPress user is a person who has an account on your website. Depending on their assigned role, users can perform different tasks, such as reading content, writing posts, managing articles, or administering the website.

Example: Education Website

Administrator: Manages the entire website.

Editor: Reviews and publishes articles.

Author: Writes and publishes their own posts.

Contributor: Writes posts for review.

Subscriber: Has basic account access.

2. What Is a User Role?

A user role is a collection of permissions that determines what a user can do on a WordPress website. WordPress provides several built-in roles.

These permissions are often called capabilities. For example, a capability may allow a user to publish posts, manage plugins, or edit other users' content.

3. The Six Common WordPress User Roles

1. Administrator

An Administrator has broad control over a WordPress site. Depending on the installation, this role can manage users, themes, plugins, settings, and website content.

Example: The person responsible for managing the entire website.

2. Editor

An Editor can generally manage and publish posts, including posts written by other users. Editors can also manage categories, tags, and comments.

Example: A content manager who reviews articles written by multiple authors.

3. Author

An Author can generally write, edit, publish, and delete their own posts. The default role does not grant the same control over other users' posts as the Editor role.

Example: A teacher who publishes their own tutorials on a website.

4. Contributor

A Contributor can generally write and edit their own unpublished posts, but cannot publish posts themselves using the default role permissions.

Example: A student or guest writer submitting an article for review.

5. Subscriber

A Subscriber has basic account permissions. This role is suitable when users need to log in but do not need publishing or administrative access.

Example: A registered reader on a website that supports user accounts.

6. Super Admin

Super Admin is a role used in WordPress Multisite installations. It can manage network-wide settings, sites, and users according to the network configuration.

Example: The person managing a network of several WordPress websites.

Important: Super Admin is associated with Multisite networks. On a normal single-site installation, you generally work with the other five built-in roles.

4. Comparison of User Roles

Role Write Posts Publish Posts Manage Other Users' Posts Manage Site Settings
Administrator Yes Yes Yes Yes
Editor Yes Yes Yes No, not generally
Author Yes Own posts No, not by default No
Contributor Yes No No, not by default No
Subscriber No, not by default No No No
Super Admin Yes, subject to site access Yes, subject to site access Broad network permissions Network-wide

Note: This table summarizes default capabilities. Plugins, custom roles, and site configuration can change permissions.

5. How to Add a New User

Follow these steps to create a WordPress user account:

  1. Log in to your WordPress dashboard.
  2. Open Users → Add New User.
  3. Enter a username.
  4. Enter the user's email address.
  5. Enter other optional details if needed.
  6. Set a password or use the available password-generation option.
  7. Select the appropriate user role.
  8. Choose whether to send the user a notification, if available.
  9. Click Add New User.
Example: Add a Teacher

Username: teacher01

Email: teacher@example.com

Role: Author

This account can generally publish its own posts without receiving full website administration permissions.

6. How to Edit a User Profile

You can edit a user's profile when you have the required permissions.

  1. Open Users → All Users.
  2. Find the user you want to edit.
  3. Click Edit beneath the username.
  4. Update the available profile information.
  5. Change the role if necessary and permitted.
  6. Save the profile changes.

Depending on the user's permissions, you may be able to change:

  • Display name and nickname
  • Email address
  • Biographical information
  • Profile options
  • Password
  • User role, if permitted

7. How to Change a User Role

  1. Go to Users → All Users.
  2. Select the user account.
  3. Open the role field or user editing screen.
  4. Choose the appropriate role.
  5. Save the changes.

Assign only the permissions required for the user's work. A person who only writes articles usually does not need Administrator access.

8. How to Delete a User

To remove a user account:

  1. Open Users → All Users.
  2. Find the account you want to remove.
  3. Choose Delete if you have permission.
  4. Review the content reassignment options, if shown.
  5. Confirm the deletion.
Warning: Before deleting a user, check whether that user owns posts or other content. WordPress may offer the option to reassign the content to another user. Choose carefully to avoid losing content.

9. What Are User Permissions?

User permissions determine which actions a user can perform. WordPress uses capabilities to control access to administrative functions and content management tasks.

Capability Example Meaning
Edit Posts Allows editing posts within the user's permissions.
Publish Posts Allows publishing posts when the capability applies.
Moderate Comments Allows managing comments.
Manage Options Allows access to certain site settings.
Install Plugins Allows installing plugins where permitted.

10. How to Allow User Registration

WordPress can allow visitors to register accounts on a website. This feature should be enabled only when it is needed.

  1. Open Settings → General.
  2. Find the Membership setting.
  3. Enable the option that allows anyone to register, if appropriate.
  4. Choose the default new-user role.
  5. Save the changes.
Security tip: If public registration is enabled, choose a suitable default role, such as Subscriber. Do not make new registrations Administrators.

11. Best Practices for User Management

  • Use strong, unique passwords.
  • Assign the minimum role needed for each person's work.
  • Remove or disable accounts that are no longer needed.
  • Review Administrator accounts regularly.
  • Keep WordPress and related plugins updated.
  • Use additional login protection when appropriate.
  • Never share Administrator credentials unnecessarily.
  • Review permissions when a user's responsibilities change.

12. Practical Assignment

Task: Practice User Management
  1. Open the WordPress dashboard.
  2. Visit Users → All Users.
  3. Review the existing user roles.
  4. Create a test user with the Author role.
  5. Log in using the test account, if possible.
  6. Observe which publishing options are available.
  7. Return to the Administrator account.
  8. Change the test user's role to Contributor.
  9. Compare the available permissions.
  10. Delete the test user when finished, if no longer needed.

Note: Perform these steps on a test website when possible.

13. Lesson Summary

  • WordPress users have accounts on your website.
  • User roles determine what users can do.
  • Administrator has broad site-management permissions.
  • Editors can manage content created by other users.
  • Authors can generally publish their own posts.
  • Contributors can write posts but cannot publish them by default.
  • Subscribers have basic account permissions.
  • Super Admin is used for WordPress Multisite networks.
  • Assigning appropriate roles improves website security.

Lesson 14 Quiz: Users and Roles

Select the correct answer for each question.

1. Which role has broad control over a WordPress single-site installation?

2. Which role can generally write posts but cannot publish them by default?

3. Which role is used for network-wide administration in WordPress Multisite?