What this problem looks like
WordPress ships with Administrator, Editor, Author, Contributor, and Subscriber roles. Plugins add roles such as Shop Manager or SEO Manager.
Capabilities map to actions like activate_plugins or edit_theme_options. Role editor plugins change that map and can lock you out if misconfigured.
Never share one Administrator login across a team. Create individual accounts so audit trails and password resets work.
Default WordPress roles explained
- Administrator: full site control including plugins and users.
- Editor: publish and edit all posts, no plugin install.
- Author: publish own posts only.
- Contributor: write posts but cannot publish.
- Subscriber: profile access only, typical for memberships.
Change a user role in wp-admin
- Users → All Users.
- Click the username.
- Change Role dropdown.
- Update User.
Manage roles with WP-CLI
bash
wp user list --fields=ID,user_login,roles
wp user set-role jane editor
wp role create client_editor --clone=editorWooCommerce Shop Manager
Shop Manager can manage orders, products, and coupons without installing plugins. Use it for fulfilment staff.
Combine Shop Manager with disable file editing so staff cannot modify theme files from admin.
Custom roles and security
User Role Editor and Members plugins add capabilities. Export role settings before experiments.
Remove old agency accounts when contracts end. Forgotten admin users are breach targets.
When to stop DIY and hire help
Complex membership and multisite role maps need careful planning. BugShield helps agencies configure WordPress access without handing clients dangerous defaults.