<\/span> What Are WordPress User Roles<\/span><\/h2>\n\n\n\nAs sites become bigger and more complex it takes more people to manage and maintain them. <\/p>\n\n\n\n
Yes, sites still need:<\/p>\n\n\n\n
\n- Authors to write new content that makes people\u2019s lives better.
<\/li>\n\n\n\n - Editors to fix all the mistakes in the authors contents
<\/li>\n\n\n\n - Administrators to keep everything upgraded and working smoothly
<\/li>\n\n\n\n - Contributors to assist editors in editing posts
<\/li>\n\n\n\n - Subscribers who may or may not have paid us money but they have at least registered with us and given us an email address. (that\u2019s worth something right there)
<\/li>\n<\/ul>\n\n\n\nBut these days sites also need:<\/p>\n\n\n\n
\n- Warehouse staff to log in, print labels, and ship products.
<\/li>\n\n\n\n - Accounting staff to make sure we collect all the money that is owed to us.
<\/li>\n\n\n\n - Social Media managers who can see behind the scenes, but not necessarily change things.
<\/li>\n\n\n\n - Community Members who have paid a premium subscription to access the really good stuff the authors are writing and editors are editing
<\/li>\n\n\n\n - And of course…premium community members who can log in and access the really REALLY good stuff we save for those special few who see our vision and subscribe at the premium level.<\/li>\n<\/ul>\n\n\n\n
The list of needed WordPress user roles is endless. It changes with every site because each site\u2019s needs are different.<\/p>\n\n\n\n
The Main Types of WordPress User Roles And Their Capabilities<\/h3>\n\n\n\n
A WordPress User Role is a collection of capabilities. A capability is a permission to do something. The standard WordPress install comes with around 40 capabilities, as well as with 6 user roles by default, ordered by level of power over those capabilities:<\/p>\n\n\n\n
Administrator:<\/strong><\/h4>\n\n\n\nThe default administrator<\/em> role (not to be confused with the administrator account…that you should not have on your site. If you do have one, stop and watch this video<\/a>) has all of the standard capabilities.<\/p>\n\n\n\nWhat can a WordPress administrator do?<\/h5>\n\n\n\n
In a regular WordPress site, there is nothing that the administrator<\/em> role cannot do<\/strong>, such as:<\/p>\n\n\n\n\n- Create or delete users & manage their permissions
<\/li>\n\n\n\n - Customize WP dashboard
<\/li>\n\n\n\n - Update the WP core, themes and plugins
<\/li>\n\n\n\n - Edit and manage posts and categories
<\/li>\n\n\n\n - Upload files
<\/li>\n\n\n\n - Moderate comments
<\/li>\n\n\n\n - …and a lot more.<\/li>\n<\/ul>\n\n\n\n
Who should get the Administrator role?<\/h5>\n\n\n\n
The administrator<\/em> role should be reserved for the person that is responsible for the technical aspects of the site<\/strong>. If you don\u2019t manage the security of the site, update plugins, and handle problems, you probably don\u2019t need to be an administrator.<\/p>\n\n\n\nFor safety sake, I always create a separate account that I use on my sites as the administrator<\/em>. My normal account – the one I use to post content and manage users – is an editor<\/em>. Therefore, I have to make a conscious decision to log in to do administrator things. <\/p>\n\n\n\nMy administrator<\/em> level accounts all have Two Factor Authentication enabled (see below) and have very strong passwords.<\/p>\n\n\n\nThings get a little more complicated if you are running a WordPress Multisite, because the admins<\/em> user capabilities are limited for these types of sites. For this, there is a bonus WordPress user role in WordPress, the Super-Admin<\/em> role.<\/p>\n\n\n\nEditor:<\/strong><\/h4>\n\n\n\nThe editor manages things. The account I normally log into my sites with is an editor<\/em>. I can do everything except manage plugins, themes, and other technical things that require some serious thought before doing. Having my day-to-day account be an editor keeps me from accidentally disabling or deleting a plugin or theme.<\/p>\n\n\n\nWho should get the Editor role?<\/h5>\n\n\n\n
Anyone who is managing things on your site<\/strong> (content, users, etc.) is a candidate for being an editor<\/em>. <\/p>\n\n\n\nDon\u2019t be fooled by the role name, editor<\/em> is still a very powerful role<\/strong> and in the wrong hands can cause serious damage to your site. Seriously consider enabling Two Factor Authentication on editors<\/em> and enforcing strong passwords to keep these accounts safe.<\/p>\n\n\n\nAuthor:<\/strong><\/h4>\n\n\n\nNext is the author<\/em> role. The author<\/em> role is a much more limited role. Out of the box, basically an author can: upload files and create, edit, publish or delete his own posts.<\/p>\n\n\n\nWho should get the Author role?<\/h5>\n\n\n\n
The author<\/em> role is great for guest posters on a blog<\/strong> or <\/strong>regular authors whose only function is to write and edit content.<\/p>\n\n\n\nSubscriber:<\/strong><\/h4>\n\n\n\nA subscriber<\/em> is a guest that has registered with your site<\/strong>. They have no capabilities other than to be able to read content and edit their information<\/strong>. <\/p>\n\n\n\nSome sites have content that is not visible to users unless they register. The subscriber<\/em> is a good role to use for that. You will need a plugin to be able to hide content from users who are not of a given role or higher, but those are easy to find in the WordPress Plugin Repository.<\/a><\/p>\n\n\n\nOther Roles:<\/strong><\/h4>\n\n\n\nMany plugins<\/strong> you install like WooCommerce will add new roles and new capabilities<\/strong> to WordPress automatically<\/strong>. For instance, When you install WooCommerce, it adds the role \u201cCustomer<\/em>\u201d. A Customer has certain capabilities that mainly deal with them being able to view and change their own data, view their roles, etc. People are moved into the “Customer<\/em>” role when they purchase something and set up an account on your site.<\/p>\n\n\n\n<\/span>How to Assign WordPress User Roles to Your Site Users<\/span><\/h2>\n\n\n\nWordPress does not come with a built in-role and capability editor (more on that below). You can<\/strong> however assign your users to<\/strong> different roles<\/strong>. There are two ways to do that with a standard WordPress install.<\/p>\n\n\n\n1. Manually<\/h3>\n\n\n\n
For each user on your site, you can bring them up in the User Editor<\/strong> and select the role you want them to have.<\/p>\n\n\n\n![\"\"](\"https:\/\/newblog.siteground.com\/en\/wp-content\/uploads\/sites\/2\/2021\/11\/one-1024x468.png\")
<\/figure>\n\n\n\nIn the above screenshot, I have selected Subscriber<\/em> for my site member Bob the Builder<\/em>. You can assign – and re-assign – roles as often as you like.<\/p>\n\n\n\n2. Automatically<\/h3>\n\n\n\n
Using an account with the role of Administrator<\/em>, you can go into the WordPress Admin Dashboard and select Settings > General<\/strong>. There you will find a drop down that allows you to decide what role users will be assigned automatically when they register with your site. This defaults to \u201cSubscriber<\/em>\u201d but you can set it to any role you like.<\/p>\n\n\n\n![\"\"](\"https:\/\/newblog.siteground.com\/en\/wp-content\/uploads\/sites\/2\/2021\/11\/two-1024x431.png\")
<\/figure>\n\n\n\n<\/span>How to Manage and Edit WordPress User Roles and Their Capabilities <\/span><\/h2>\n\n\n\nAs I said, almost all of the capabilities are reserved for the administrator, that doesn\u2019t mean you can\u2019t change things around. There are times when you may want your contributors to be able to moderate comments, a capability usually reserved for Editors. WordPress is flexible enough to allow you to move capabilities around and even create new roles. <\/p>\n\n\n\n
Out of the box, there is no good way to look at what roles and capabilities are set up in WordPress nor create new ones. If you are a programmer, you can of course write code to show them to you and even write code that will create new ones. Where\u2019s the fun in that though? <\/p>\n\n\n\n
Like everything in WordPress, the easy way to manage roles and capabilities is to install a plugin<\/strong>. Also, like everything in WordPress, there are a lot of good plugins to choose from that will help you see, manage, and create user roles and capabilities.<\/p>\n\n\n\nBecause there are so many plugins out there, I can\u2019t tell you which one is best. I can, however, tell you which one I use. I use User Role Editor<\/strong><\/a> by Vladimir Garagulya and have for a while now. <\/p>\n\n\n\nThe biggest reason I chose this particular plugin is that it does the job. The second biggest reason I chose it was because it\u2019s free and I am cheap. When I say free, I mean that I use the free version. Vladimir has several options out there for those who want the advanced features and this code is well worth the money.<\/p>\n\n\n\n
How to Manage WordPress User Roles With User Role Editor<\/h3>\n\n\n\n
After installing User Role Editor, you will probably notice that it didn\u2019t add yet another menu item to your left sidebar. Instead, it adds a sub-menu item to the \u201cUsers<\/strong>\u201d menu, \u201cUser Role Editor<\/strong>\u201d.<\/p>\n\n\n\n![\"\"](\"https:\/\/newblog.siteground.com\/en\/wp-content\/uploads\/sites\/2\/2021\/11\/three.png\")
<\/figure>\n\n\n\nClick on that and you get a complete list of all the capabilities currently in use on your system.<\/p>\n\n\n\n![\"\"](\"https:\/\/newblog.siteground.com\/en\/wp-content\/uploads\/sites\/2\/2021\/11\/four-1-1024x720.png\")
<\/figure>\n\n\n\nOn the right side of the list are a series of buttons that allow you to add new roles and capabilities.<\/p>\n\n\n\n![\"\"](\"https:\/\/newblog.siteground.com\/en\/wp-content\/uploads\/sites\/2\/2021\/11\/five.png\")
<\/figure>\n\n\n\nThe screen layout can be a little confusing at first. However, once you begin to poke around and see how things are laid out, you begin to get the feel for it.<\/p>\n\n\n\n![\"\"](\"https:\/\/newblog.siteground.com\/en\/wp-content\/uploads\/sites\/2\/2021\/11\/six-1024x812.png\")
<\/figure>\n\n\n\nAs you can see, if you select the “Administrator<\/em>” role in the dropdown at the top of the screen, it shows you all the capabilities that the Administrator role has access to. (Hint: All of them)<\/p>\n\n\n\nThe tree on the left is how the capabilities are broken down and organized. This way you don\u2019t have to scroll through the entire list to find that one you want to turn on or off.<\/p>\n\n\n\n
To use the example I used above, if I want my contributors to be able to moderate comments, the first thing I do is select “Contributor<\/em>” from the list of roles.<\/p>\n\n\n\n![\"\"](\"https:\/\/newblog.siteground.com\/en\/wp-content\/uploads\/sites\/2\/2021\/11\/seven.png\")
<\/figure>\n\n\n\nOnce selected, I see that almost all of the checkboxes disappear. On the tree on the left, each category gives me 2 numbers, the number of capabilities in that category and the number of capabilities this role has in that category. In the case of \u201cContributor<\/em>\u201d most of the second number are 0.<\/p>\n\n\n\nUsing the tree on the left, we can select \u201cPosts<\/strong>\u201d to find the moderate comments capabilities.<\/p>\n\n\n\n![\"\"](\"https:\/\/newblog.siteground.com\/en\/wp-content\/uploads\/sites\/2\/2021\/11\/eight-921x1024.png\")
<\/figure>\n\n\n\nTo grant our contributors the ability to moderate comments we just check the box and click \u201cUpdate<\/strong>” on the right. <\/p>\n\n\n\nThat\u2019s all there is to it. Now any person who logs in and is a \u201cContributor<\/em>\u201d will have the ability to moderate comments on posts.<\/p>\n\n\n\nThat gives you a feel for how easy it is to manage existing user roles and capabilities.<\/p>\n\n\n\n
How to Create New WordPress User Roles and Capabilities With User Role Editor<\/h3>\n\n\n\n
What about new Roles and Capabilities? Are those as easy? Yes, they are.<\/p>\n\n\n\n
On the right, click \u201cAdd Role<\/strong>\u201d and follow the prompts.<\/p>\n\n\n\n![\"\"](\"https:\/\/newblog.siteground.com\/en\/wp-content\/uploads\/sites\/2\/2021\/11\/Screen-Shot-2021-11-25-at-09.45.36.png\")
<\/figure>\n\n\n\nIf your new role is similar to an existing role, it even gives you the ability to clone an existing role to save time. Then you can simply change the capabilities of your new role to suit your needs.<\/p>\n\n\n\n
New Capabilities on the other hand are a little more difficult. Yes, you can define them in the interface but unless there is code written to use the new capabilities they won\u2019t have any effect. Before you start adding capabilities, talk to your programmer.<\/p>\n\n\n\n
<\/span>WordPress User Roles Security<\/span><\/h2>\n\n\n\nSo as you\u2019ve seen it\u2019s really easy to add new roles and customize them to fit your needs. Just because it\u2019s easy though doesn\u2019t mean you should add a bunch of them willy-nilly. Before you start, sit down and decide why a new role is necessary.<\/strong> What will this new role be able to do or not do that is different from existing roles. The more roles you add, the more you have to manage. <\/p>\n\n\n\nAlso, there are 2 things you can do for better WordPress security<\/strong> in terms of user roles:<\/p>\n\n\n\nApply The Principle of Least Privilege<\/h3>\n\n\n\n![\"\"](\"https:\/\/newblog.siteground.com\/en\/wp-content\/uploads\/sites\/2\/2021\/11\/blog-post-1200x600-5-1024x512.jpeg\")
<\/figure>\n\n\n\nOnce you have decided to add a new role into your system make sure you adhere to the Principle of Least Privilege<\/a>. When creating roles, less is more<\/strong>. Only give your new roles the minimum capabilities they need to fulfil their role. If you are setting up an accounting role, don\u2019t give them the capability to Delete Posts. Stick with the minimum, you can always add later if you need to.<\/p>\n\n\n\nImplement Two Factor Authentication (2FA)<\/h3>\n\n\n\n![\"\"](\"https:\/\/newblog.siteground.com\/en\/wp-content\/uploads\/sites\/2\/2021\/11\/2FA_WordPress_blog-post-1200x600-1-1024x512.jpeg\")
<\/figure>\n\n\n\nFor every new role you setup that has significant permissions, make sure you setup and enforce Two Factor Authentication<\/a><\/strong> for those roles.\u00a0<\/p>\n\n\n\nIf the Administrator role is the only significantly powerful role you have, then the SiteGround Security Plugin<\/a> is a great option. It makes setting up 2FA for the Admin Role very simple. Here is a demo on how it works<\/a>.<\/p>\n\n\n\nIf you have other roles that have significant power or can see Personally Identifiable Information (PII) for other users, make sure they have 2FA enforced as well. There are several good (free) 2FA plugins out there that can help you do that.<\/p>\n\n\n\n
<\/span>Wrap Up<\/span><\/h2>\n\n\n\nWordPress has a power user role and capability system that is flexible enough to meet almost any site\u2019s needs. Like any powerful tool though, you can do damage to your site. You can lock users out of capabilities they need to access the site or give users the power to do bad things.<\/p>\n\n\n\n
Before you start, stop, think, and then act. That is the winning strategy for managing user roles and capabilities in WordPress.<\/p>\n\n\n\n
[subscribe_cta]<\/p>\n","protected":false},"excerpt":{"rendered":"As WordPress has grown in popularity, application, and complexity, we have all discovered something very important, making everyone an administrator isn\u2019t a winning strategy. Thankfully WordPress provides us with a very powerful tool called User Roles and Capabilities that helps us give people just the capabilities they need without giving them too much or too…","protected":false},"author":81,"featured_media":15300,"comment_status":"open","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[2098,15],"tags":[],"class_list":["post-15277","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-hosting-insights","category-wordpress"],"yoast_head":"\n
All You Need to Know On WordPress User Roles And Capabilities To Manage Them Wisely - SiteGround<\/title>\n<meta name=\"description\" content=\"Learn which are the six main WordPress User Roles and their capabilities, who should get each, how to assign and edit them + tips to manage them securely.\" \/>\n<meta name=\"robots\" content=\"index, follow, max-snippet:-1, max-image-preview:large, max-video-preview:-1\" \/>\n<link rel=\"canonical\" href=\"https:\/\/newblog.siteground.com\/en\/wordpress-user-roles-and-capabilities\/\" \/>\n<meta property=\"og:locale\" content=\"en_US\" \/>\n<meta property=\"og:type\" content=\"article\" \/>\n<meta property=\"og:title\" content=\"All You Need to Know On WordPress User Roles And Capabilities To Manage Them Wisely\" \/>\n<meta property=\"og:description\" content=\"Learn which are the six main WordPress User Roles and their capabilities, who should get each, how to assign and edit them + tips to manage them securely.\" \/>\n<meta property=\"og:url\" content=\"https:\/\/newblog.siteground.com\/en\/wordpress-user-roles-and-capabilities\/\" \/>\n<meta property=\"og:site_name\" content=\"SiteGround\" \/>\n<meta property=\"article:publisher\" content=\"https:\/\/www.facebook.com\/siteground\" \/>\n<meta property=\"article:published_time\" content=\"2021-11-25T10:46:22+00:00\" \/>\n<meta property=\"article:modified_time\" content=\"2026-05-13T07:52:43+00:00\" \/>\n<meta property=\"og:image\" content=\"https:\/\/newblog.siteground.com\/en\/wp-content\/uploads\/sites\/2\/2021\/11\/fb-1200x630-1.jpg\" \/>\n<meta name=\"author\" content=\"Cal Evans\" \/>\n<meta name=\"twitter:card\" content=\"summary_large_image\" \/>\n<meta name=\"twitter:title\" content=\"All You Need to Know On WordPress User Roles And Capabilities To Manage Them Wisely\" \/>\n<meta name=\"twitter:description\" content=\"Learn which are the six main WordPress User Roles and their capabilities, who should get each, how to assign and edit them + tips to manage them securely.\" \/>\n<meta name=\"twitter:image\" content=\"https:\/\/newblog.siteground.com\/en\/wp-content\/uploads\/sites\/2\/2021\/11\/tw-1200x675-1.jpg\" \/>\n<meta name=\"twitter:creator\" content=\"@siteground\" \/>\n<meta name=\"twitter:site\" content=\"@siteground\" \/>\n<meta name=\"twitter:label1\" content=\"Written by\" \/>\n\t<meta name=\"twitter:data1\" content=\"Cal Evans\" \/>\n\t<meta name=\"twitter:label2\" content=\"Est. reading time\" \/>\n\t<meta name=\"twitter:data2\" content=\"13 minutes\" \/>\n<script type=\"application\/ld+json\" class=\"yoast-schema-graph\">{\"@context\":\"https:\/\/schema.org\",\"@graph\":[{\"@type\":\"Article\",\"@id\":\"https:\/\/newblog.siteground.com\/en\/wordpress-user-roles-and-capabilities\/#article\",\"isPartOf\":{\"@id\":\"https:\/\/newblog.siteground.com\/en\/wordpress-user-roles-and-capabilities\/\"},\"author\":{\"name\":\"Cal Evans\",\"@id\":\"https:\/\/newblog.siteground.com\/en\/#\/schema\/person\/b7d955fe8f207e8e13a00552dc043fff\"},\"headline\":\"All You Need to Know On WordPress User Roles And Capabilities To Manage Them Wisely\",\"datePublished\":\"2021-11-25T10:46:22+00:00\",\"dateModified\":\"2026-05-13T07:52:43+00:00\",\"mainEntityOfPage\":{\"@id\":\"https:\/\/newblog.siteground.com\/en\/wordpress-user-roles-and-capabilities\/\"},\"wordCount\":2255,\"commentCount\":0,\"publisher\":{\"@id\":\"https:\/\/newblog.siteground.com\/en\/#organization\"},\"image\":{\"@id\":\"https:\/\/newblog.siteground.com\/en\/wordpress-user-roles-and-capabilities\/#primaryimage\"},\"thumbnailUrl\":\"https:\/\/newblog.siteground.com\/en\/wp-content\/uploads\/sites\/2\/2021\/11\/blog-post-1200x600-2-1.jpg\",\"articleSection\":[\"Hosting Insights\",\"WordPress\"],\"inLanguage\":\"en-US\",\"potentialAction\":[{\"@type\":\"CommentAction\",\"name\":\"Comment\",\"target\":[\"https:\/\/newblog.siteground.com\/en\/wordpress-user-roles-and-capabilities\/#respond\"]}]},{\"@type\":\"WebPage\",\"@id\":\"https:\/\/newblog.siteground.com\/en\/wordpress-user-roles-and-capabilities\/\",\"url\":\"https:\/\/newblog.siteground.com\/en\/wordpress-user-roles-and-capabilities\/\",\"name\":\"All You Need to Know On WordPress User Roles And Capabilities To Manage Them Wisely - SiteGround\",\"isPartOf\":{\"@id\":\"https:\/\/newblog.siteground.com\/en\/#website\"},\"primaryImageOfPage\":{\"@id\":\"https:\/\/newblog.siteground.com\/en\/wordpress-user-roles-and-capabilities\/#primaryimage\"},\"image\":{\"@id\":\"https:\/\/newblog.siteground.com\/en\/wordpress-user-roles-and-capabilities\/#primaryimage\"},\"thumbnailUrl\":\"https:\/\/newblog.siteground.com\/en\/wp-content\/uploads\/sites\/2\/2021\/11\/blog-post-1200x600-2-1.jpg\",\"datePublished\":\"2021-11-25T10:46:22+00:00\",\"dateModified\":\"2026-05-13T07:52:43+00:00\",\"description\":\"Learn which are the six main WordPress User Roles and their capabilities, who should get each, how to assign and edit them + tips to manage them securely.\",\"breadcrumb\":{\"@id\":\"https:\/\/newblog.siteground.com\/en\/wordpress-user-roles-and-capabilities\/#breadcrumb\"},\"inLanguage\":\"en-US\",\"potentialAction\":[{\"@type\":\"ReadAction\",\"target\":[\"https:\/\/newblog.siteground.com\/en\/wordpress-user-roles-and-capabilities\/\"]}]},{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\/\/newblog.siteground.com\/en\/wordpress-user-roles-and-capabilities\/#primaryimage\",\"url\":\"https:\/\/newblog.siteground.com\/en\/wp-content\/uploads\/sites\/2\/2021\/11\/blog-post-1200x600-2-1.jpg\",\"contentUrl\":\"https:\/\/newblog.siteground.com\/en\/wp-content\/uploads\/sites\/2\/2021\/11\/blog-post-1200x600-2-1.jpg\",\"width\":1200,\"height\":600},{\"@type\":\"BreadcrumbList\",\"@id\":\"https:\/\/newblog.siteground.com\/en\/wordpress-user-roles-and-capabilities\/#breadcrumb\",\"itemListElement\":[{\"@type\":\"ListItem\",\"position\":1,\"name\":\"Home\",\"item\":\"https:\/\/newblog.siteground.com\/en\/\"},{\"@type\":\"ListItem\",\"position\":2,\"name\":\"All You Need to Know On WordPress User Roles And Capabilities To Manage Them Wisely\"}]},{\"@type\":\"WebSite\",\"@id\":\"https:\/\/newblog.siteground.com\/en\/#website\",\"url\":\"https:\/\/newblog.siteground.com\/en\/\",\"name\":\"SiteGround Blog\",\"description\":\"\",\"publisher\":{\"@id\":\"https:\/\/newblog.siteground.com\/en\/#organization\"},\"potentialAction\":[{\"@type\":\"SearchAction\",\"target\":{\"@type\":\"EntryPoint\",\"urlTemplate\":\"https:\/\/newblog.siteground.com\/en\/?s={search_term_string}\"},\"query-input\":{\"@type\":\"PropertyValueSpecification\",\"valueRequired\":true,\"valueName\":\"search_term_string\"}}],\"inLanguage\":\"en-US\"},{\"@type\":\"Organization\",\"@id\":\"https:\/\/newblog.siteground.com\/en\/#organization\",\"name\":\"SiteGround Blog\",\"url\":\"https:\/\/newblog.siteground.com\/en\/\",\"logo\":{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\/\/newblog.siteground.com\/en\/#\/schema\/logo\/image\/\",\"url\":\"https:\/\/newblog.siteground.com\/en\/wp-content\/uploads\/sites\/2\/2025\/01\/Siteground-Logo-on-white.jpg\",\"contentUrl\":\"https:\/\/newblog.siteground.com\/en\/wp-content\/uploads\/sites\/2\/2025\/01\/Siteground-Logo-on-white.jpg\",\"width\":1200,\"height\":400,\"caption\":\"SiteGround Blog\"},\"image\":{\"@id\":\"https:\/\/newblog.siteground.com\/en\/#\/schema\/logo\/image\/\"},\"sameAs\":[\"https:\/\/www.facebook.com\/siteground\",\"https:\/\/x.com\/siteground\",\"https:\/\/www.instagram.com\/siteground\/\",\"https:\/\/www.youtube.com\/@siteground\"]},{\"@type\":\"Person\",\"@id\":\"https:\/\/newblog.siteground.com\/en\/#\/schema\/person\/b7d955fe8f207e8e13a00552dc043fff\",\"name\":\"Cal Evans\",\"image\":{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\/\/newblog.siteground.com\/en\/#\/schema\/person\/image\/\",\"url\":\"https:\/\/secure.gravatar.com\/avatar\/b8191d355780536d1c461f7e25b75129?s=96&d=mm&r=g\",\"contentUrl\":\"https:\/\/secure.gravatar.com\/avatar\/b8191d355780536d1c461f7e25b75129?s=96&d=mm&r=g\",\"caption\":\"Cal Evans\"},\"sameAs\":[\"https:\/\/www.linkedin.com\/in\/calevans\/\"],\"url\":\"https:\/\/newblog.siteground.com\/en\/author\/calevans\/\"}]}<\/script>\n<!-- \/ Yoast SEO Premium plugin. -->","yoast_head_json":{"title":"All You Need to Know On WordPress User Roles And Capabilities To Manage Them Wisely - SiteGround","description":"Learn which are the six main WordPress User Roles and their capabilities, who should get each, how to assign and edit them + tips to manage them securely.","robots":{"index":"index","follow":"follow","max-snippet":"max-snippet:-1","max-image-preview":"max-image-preview:large","max-video-preview":"max-video-preview:-1"},"canonical":"https:\/\/newblog.siteground.com\/en\/wordpress-user-roles-and-capabilities\/","og_locale":"en_US","og_type":"article","og_title":"All You Need to Know On WordPress User Roles And Capabilities To Manage Them Wisely","og_description":"Learn which are the six main WordPress User Roles and their capabilities, who should get each, how to assign and edit them + tips to manage them securely.","og_url":"https:\/\/newblog.siteground.com\/en\/wordpress-user-roles-and-capabilities\/","og_site_name":"SiteGround","article_publisher":"https:\/\/www.facebook.com\/siteground","article_published_time":"2021-11-25T10:46:22+00:00","article_modified_time":"2026-05-13T07:52:43+00:00","og_image":[{"url":"https:\/\/newblog.siteground.com\/en\/wp-content\/uploads\/sites\/2\/2021\/11\/fb-1200x630-1.jpg","type":"","width":"","height":""}],"author":"Cal Evans","twitter_card":"summary_large_image","twitter_title":"All You Need to Know On WordPress User Roles And Capabilities To Manage Them Wisely","twitter_description":"Learn which are the six main WordPress User Roles and their capabilities, who should get each, how to assign and edit them + tips to manage them securely.","twitter_image":"https:\/\/newblog.siteground.com\/en\/wp-content\/uploads\/sites\/2\/2021\/11\/tw-1200x675-1.jpg","twitter_creator":"@siteground","twitter_site":"@siteground","twitter_misc":{"Written by":"Cal Evans","Est. reading time":"13 minutes"},"schema":{"@context":"https:\/\/schema.org","@graph":[{"@type":"Article","@id":"https:\/\/newblog.siteground.com\/en\/wordpress-user-roles-and-capabilities\/#article","isPartOf":{"@id":"https:\/\/newblog.siteground.com\/en\/wordpress-user-roles-and-capabilities\/"},"author":{"name":"Cal Evans","@id":"https:\/\/newblog.siteground.com\/en\/#\/schema\/person\/b7d955fe8f207e8e13a00552dc043fff"},"headline":"All You Need to Know On WordPress User Roles And Capabilities To Manage Them Wisely","datePublished":"2021-11-25T10:46:22+00:00","dateModified":"2026-05-13T07:52:43+00:00","mainEntityOfPage":{"@id":"https:\/\/newblog.siteground.com\/en\/wordpress-user-roles-and-capabilities\/"},"wordCount":2255,"commentCount":0,"publisher":{"@id":"https:\/\/newblog.siteground.com\/en\/#organization"},"image":{"@id":"https:\/\/newblog.siteground.com\/en\/wordpress-user-roles-and-capabilities\/#primaryimage"},"thumbnailUrl":"https:\/\/newblog.siteground.com\/en\/wp-content\/uploads\/sites\/2\/2021\/11\/blog-post-1200x600-2-1.jpg","articleSection":["Hosting Insights","WordPress"],"inLanguage":"en-US","potentialAction":[{"@type":"CommentAction","name":"Comment","target":["https:\/\/newblog.siteground.com\/en\/wordpress-user-roles-and-capabilities\/#respond"]}]},{"@type":"WebPage","@id":"https:\/\/newblog.siteground.com\/en\/wordpress-user-roles-and-capabilities\/","url":"https:\/\/newblog.siteground.com\/en\/wordpress-user-roles-and-capabilities\/","name":"All You Need to Know On WordPress User Roles And Capabilities To Manage Them Wisely - SiteGround","isPartOf":{"@id":"https:\/\/newblog.siteground.com\/en\/#website"},"primaryImageOfPage":{"@id":"https:\/\/newblog.siteground.com\/en\/wordpress-user-roles-and-capabilities\/#primaryimage"},"image":{"@id":"https:\/\/newblog.siteground.com\/en\/wordpress-user-roles-and-capabilities\/#primaryimage"},"thumbnailUrl":"https:\/\/newblog.siteground.com\/en\/wp-content\/uploads\/sites\/2\/2021\/11\/blog-post-1200x600-2-1.jpg","datePublished":"2021-11-25T10:46:22+00:00","dateModified":"2026-05-13T07:52:43+00:00","description":"Learn which are the six main WordPress User Roles and their capabilities, who should get each, how to assign and edit them + tips to manage them securely.","breadcrumb":{"@id":"https:\/\/newblog.siteground.com\/en\/wordpress-user-roles-and-capabilities\/#breadcrumb"},"inLanguage":"en-US","potentialAction":[{"@type":"ReadAction","target":["https:\/\/newblog.siteground.com\/en\/wordpress-user-roles-and-capabilities\/"]}]},{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/newblog.siteground.com\/en\/wordpress-user-roles-and-capabilities\/#primaryimage","url":"https:\/\/newblog.siteground.com\/en\/wp-content\/uploads\/sites\/2\/2021\/11\/blog-post-1200x600-2-1.jpg","contentUrl":"https:\/\/newblog.siteground.com\/en\/wp-content\/uploads\/sites\/2\/2021\/11\/blog-post-1200x600-2-1.jpg","width":1200,"height":600},{"@type":"BreadcrumbList","@id":"https:\/\/newblog.siteground.com\/en\/wordpress-user-roles-and-capabilities\/#breadcrumb","itemListElement":[{"@type":"ListItem","position":1,"name":"Home","item":"https:\/\/newblog.siteground.com\/en\/"},{"@type":"ListItem","position":2,"name":"All You Need to Know On WordPress User Roles And Capabilities To Manage Them Wisely"}]},{"@type":"WebSite","@id":"https:\/\/newblog.siteground.com\/en\/#website","url":"https:\/\/newblog.siteground.com\/en\/","name":"SiteGround Blog","description":"","publisher":{"@id":"https:\/\/newblog.siteground.com\/en\/#organization"},"potentialAction":[{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https:\/\/newblog.siteground.com\/en\/?s={search_term_string}"},"query-input":{"@type":"PropertyValueSpecification","valueRequired":true,"valueName":"search_term_string"}}],"inLanguage":"en-US"},{"@type":"Organization","@id":"https:\/\/newblog.siteground.com\/en\/#organization","name":"SiteGround Blog","url":"https:\/\/newblog.siteground.com\/en\/","logo":{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/newblog.siteground.com\/en\/#\/schema\/logo\/image\/","url":"https:\/\/newblog.siteground.com\/en\/wp-content\/uploads\/sites\/2\/2025\/01\/Siteground-Logo-on-white.jpg","contentUrl":"https:\/\/newblog.siteground.com\/en\/wp-content\/uploads\/sites\/2\/2025\/01\/Siteground-Logo-on-white.jpg","width":1200,"height":400,"caption":"SiteGround Blog"},"image":{"@id":"https:\/\/newblog.siteground.com\/en\/#\/schema\/logo\/image\/"},"sameAs":["https:\/\/www.facebook.com\/siteground","https:\/\/x.com\/siteground","https:\/\/www.instagram.com\/siteground\/","https:\/\/www.youtube.com\/@siteground"]},{"@type":"Person","@id":"https:\/\/newblog.siteground.com\/en\/#\/schema\/person\/b7d955fe8f207e8e13a00552dc043fff","name":"Cal Evans","image":{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/newblog.siteground.com\/en\/#\/schema\/person\/image\/","url":"https:\/\/secure.gravatar.com\/avatar\/b8191d355780536d1c461f7e25b75129?s=96&d=mm&r=g","contentUrl":"https:\/\/secure.gravatar.com\/avatar\/b8191d355780536d1c461f7e25b75129?s=96&d=mm&r=g","caption":"Cal Evans"},"sameAs":["https:\/\/www.linkedin.com\/in\/calevans\/"],"url":"https:\/\/newblog.siteground.com\/en\/author\/calevans\/"}]}},"_links":{"self":[{"href":"https:\/\/newblog.siteground.com\/en\/wp-json\/wp\/v2\/posts\/15277","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/newblog.siteground.com\/en\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/newblog.siteground.com\/en\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/newblog.siteground.com\/en\/wp-json\/wp\/v2\/users\/81"}],"replies":[{"embeddable":true,"href":"https:\/\/newblog.siteground.com\/en\/wp-json\/wp\/v2\/comments?post=15277"}],"version-history":[{"count":15,"href":"https:\/\/newblog.siteground.com\/en\/wp-json\/wp\/v2\/posts\/15277\/revisions"}],"predecessor-version":[{"id":24784,"href":"https:\/\/newblog.siteground.com\/en\/wp-json\/wp\/v2\/posts\/15277\/revisions\/24784"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/newblog.siteground.com\/en\/wp-json\/wp\/v2\/media\/15300"}],"wp:attachment":[{"href":"https:\/\/newblog.siteground.com\/en\/wp-json\/wp\/v2\/media?parent=15277"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/newblog.siteground.com\/en\/wp-json\/wp\/v2\/categories?post=15277"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/newblog.siteground.com\/en\/wp-json\/wp\/v2\/tags?post=15277"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}
<\/li>\n\n\n\n
<\/li>\n\n\n\n
<\/li>\n\n\n\n
<\/li>\n\n\n\n
<\/li>\n<\/ul>\n\n\n\n
But these days sites also need:<\/p>\n\n\n\n
- \n
- Warehouse staff to log in, print labels, and ship products.
<\/li>\n\n\n\n - Accounting staff to make sure we collect all the money that is owed to us.
<\/li>\n\n\n\n - Social Media managers who can see behind the scenes, but not necessarily change things.
<\/li>\n\n\n\n - Community Members who have paid a premium subscription to access the really good stuff the authors are writing and editors are editing
<\/li>\n\n\n\n - And of course…premium community members who can log in and access the really REALLY good stuff we save for those special few who see our vision and subscribe at the premium level.<\/li>\n<\/ul>\n\n\n\n
The list of needed WordPress user roles is endless. It changes with every site because each site\u2019s needs are different.<\/p>\n\n\n\n
The Main Types of WordPress User Roles And Their Capabilities<\/h3>\n\n\n\n
A WordPress User Role is a collection of capabilities. A capability is a permission to do something. The standard WordPress install comes with around 40 capabilities, as well as with 6 user roles by default, ordered by level of power over those capabilities:<\/p>\n\n\n\n
Administrator:<\/strong><\/h4>\n\n\n\n
The default administrator<\/em> role (not to be confused with the administrator account…that you should not have on your site. If you do have one, stop and watch this video<\/a>) has all of the standard capabilities.<\/p>\n\n\n\n
What can a WordPress administrator do?<\/h5>\n\n\n\n
In a regular WordPress site, there is nothing that the administrator<\/em> role cannot do<\/strong>, such as:<\/p>\n\n\n\n
- \n
- Create or delete users & manage their permissions
<\/li>\n\n\n\n - Customize WP dashboard
<\/li>\n\n\n\n - Update the WP core, themes and plugins
<\/li>\n\n\n\n - Edit and manage posts and categories
<\/li>\n\n\n\n - Upload files
<\/li>\n\n\n\n - Moderate comments
<\/li>\n\n\n\n - …and a lot more.<\/li>\n<\/ul>\n\n\n\n
Who should get the Administrator role?<\/h5>\n\n\n\n
The administrator<\/em> role should be reserved for the person that is responsible for the technical aspects of the site<\/strong>. If you don\u2019t manage the security of the site, update plugins, and handle problems, you probably don\u2019t need to be an administrator.<\/p>\n\n\n\n
For safety sake, I always create a separate account that I use on my sites as the administrator<\/em>. My normal account – the one I use to post content and manage users – is an editor<\/em>. Therefore, I have to make a conscious decision to log in to do administrator things. <\/p>\n\n\n\n
My administrator<\/em> level accounts all have Two Factor Authentication enabled (see below) and have very strong passwords.<\/p>\n\n\n\n
Things get a little more complicated if you are running a WordPress Multisite, because the admins<\/em> user capabilities are limited for these types of sites. For this, there is a bonus WordPress user role in WordPress, the Super-Admin<\/em> role.<\/p>\n\n\n\n
Editor:<\/strong><\/h4>\n\n\n\n
The editor manages things. The account I normally log into my sites with is an editor<\/em>. I can do everything except manage plugins, themes, and other technical things that require some serious thought before doing. Having my day-to-day account be an editor keeps me from accidentally disabling or deleting a plugin or theme.<\/p>\n\n\n\n
Who should get the Editor role?<\/h5>\n\n\n\n
Anyone who is managing things on your site<\/strong> (content, users, etc.) is a candidate for being an editor<\/em>. <\/p>\n\n\n\n
Don\u2019t be fooled by the role name, editor<\/em> is still a very powerful role<\/strong> and in the wrong hands can cause serious damage to your site. Seriously consider enabling Two Factor Authentication on editors<\/em> and enforcing strong passwords to keep these accounts safe.<\/p>\n\n\n\n
Author:<\/strong><\/h4>\n\n\n\n
Next is the author<\/em> role. The author<\/em> role is a much more limited role. Out of the box, basically an author can: upload files and create, edit, publish or delete his own posts.<\/p>\n\n\n\n
Who should get the Author role?<\/h5>\n\n\n\n
The author<\/em> role is great for guest posters on a blog<\/strong> or <\/strong>regular authors whose only function is to write and edit content.<\/p>\n\n\n\n
Subscriber:<\/strong><\/h4>\n\n\n\n
A subscriber<\/em> is a guest that has registered with your site<\/strong>. They have no capabilities other than to be able to read content and edit their information<\/strong>. <\/p>\n\n\n\n
Some sites have content that is not visible to users unless they register. The subscriber<\/em> is a good role to use for that. You will need a plugin to be able to hide content from users who are not of a given role or higher, but those are easy to find in the WordPress Plugin Repository.<\/a><\/p>\n\n\n\n
Other Roles:<\/strong><\/h4>\n\n\n\n
Many plugins<\/strong> you install like WooCommerce will add new roles and new capabilities<\/strong> to WordPress automatically<\/strong>. For instance, When you install WooCommerce, it adds the role \u201cCustomer<\/em>\u201d. A Customer has certain capabilities that mainly deal with them being able to view and change their own data, view their roles, etc. People are moved into the “Customer<\/em>” role when they purchase something and set up an account on your site.<\/p>\n\n\n\n
<\/span>How to Assign WordPress User Roles to Your Site Users<\/span><\/h2>\n\n\n\n
WordPress does not come with a built in-role and capability editor (more on that below). You can<\/strong> however assign your users to<\/strong> different roles<\/strong>. There are two ways to do that with a standard WordPress install.<\/p>\n\n\n\n
1. Manually<\/h3>\n\n\n\n
For each user on your site, you can bring them up in the User Editor<\/strong> and select the role you want them to have.<\/p>\n\n\n\n
<\/figure>\n\n\n\nIn the above screenshot, I have selected Subscriber<\/em> for my site member Bob the Builder<\/em>. You can assign – and re-assign – roles as often as you like.<\/p>\n\n\n\n
2. Automatically<\/h3>\n\n\n\n
Using an account with the role of Administrator<\/em>, you can go into the WordPress Admin Dashboard and select Settings > General<\/strong>. There you will find a drop down that allows you to decide what role users will be assigned automatically when they register with your site. This defaults to \u201cSubscriber<\/em>\u201d but you can set it to any role you like.<\/p>\n\n\n\n
<\/figure>\n\n\n\n<\/span>How to Manage and Edit WordPress User Roles and Their Capabilities <\/span><\/h2>\n\n\n\n
As I said, almost all of the capabilities are reserved for the administrator, that doesn\u2019t mean you can\u2019t change things around. There are times when you may want your contributors to be able to moderate comments, a capability usually reserved for Editors. WordPress is flexible enough to allow you to move capabilities around and even create new roles. <\/p>\n\n\n\n
Out of the box, there is no good way to look at what roles and capabilities are set up in WordPress nor create new ones. If you are a programmer, you can of course write code to show them to you and even write code that will create new ones. Where\u2019s the fun in that though? <\/p>\n\n\n\n
Like everything in WordPress, the easy way to manage roles and capabilities is to install a plugin<\/strong>. Also, like everything in WordPress, there are a lot of good plugins to choose from that will help you see, manage, and create user roles and capabilities.<\/p>\n\n\n\n
Because there are so many plugins out there, I can\u2019t tell you which one is best. I can, however, tell you which one I use. I use User Role Editor<\/strong><\/a> by Vladimir Garagulya and have for a while now. <\/p>\n\n\n\n
The biggest reason I chose this particular plugin is that it does the job. The second biggest reason I chose it was because it\u2019s free and I am cheap. When I say free, I mean that I use the free version. Vladimir has several options out there for those who want the advanced features and this code is well worth the money.<\/p>\n\n\n\n
How to Manage WordPress User Roles With User Role Editor<\/h3>\n\n\n\n
After installing User Role Editor, you will probably notice that it didn\u2019t add yet another menu item to your left sidebar. Instead, it adds a sub-menu item to the \u201cUsers<\/strong>\u201d menu, \u201cUser Role Editor<\/strong>\u201d.<\/p>\n\n\n\n
<\/figure>\n\n\n\nClick on that and you get a complete list of all the capabilities currently in use on your system.<\/p>\n\n\n\n
<\/figure>\n\n\n\nOn the right side of the list are a series of buttons that allow you to add new roles and capabilities.<\/p>\n\n\n\n
<\/figure>\n\n\n\nThe screen layout can be a little confusing at first. However, once you begin to poke around and see how things are laid out, you begin to get the feel for it.<\/p>\n\n\n\n
<\/figure>\n\n\n\nAs you can see, if you select the “Administrator<\/em>” role in the dropdown at the top of the screen, it shows you all the capabilities that the Administrator role has access to. (Hint: All of them)<\/p>\n\n\n\n
The tree on the left is how the capabilities are broken down and organized. This way you don\u2019t have to scroll through the entire list to find that one you want to turn on or off.<\/p>\n\n\n\n
To use the example I used above, if I want my contributors to be able to moderate comments, the first thing I do is select “Contributor<\/em>” from the list of roles.<\/p>\n\n\n\n
<\/figure>\n\n\n\nOnce selected, I see that almost all of the checkboxes disappear. On the tree on the left, each category gives me 2 numbers, the number of capabilities in that category and the number of capabilities this role has in that category. In the case of \u201cContributor<\/em>\u201d most of the second number are 0.<\/p>\n\n\n\n
Using the tree on the left, we can select \u201cPosts<\/strong>\u201d to find the moderate comments capabilities.<\/p>\n\n\n\n
<\/figure>\n\n\n\nTo grant our contributors the ability to moderate comments we just check the box and click \u201cUpdate<\/strong>” on the right. <\/p>\n\n\n\n
That\u2019s all there is to it. Now any person who logs in and is a \u201cContributor<\/em>\u201d will have the ability to moderate comments on posts.<\/p>\n\n\n\n
That gives you a feel for how easy it is to manage existing user roles and capabilities.<\/p>\n\n\n\n
How to Create New WordPress User Roles and Capabilities With User Role Editor<\/h3>\n\n\n\n
What about new Roles and Capabilities? Are those as easy? Yes, they are.<\/p>\n\n\n\n
On the right, click \u201cAdd Role<\/strong>\u201d and follow the prompts.<\/p>\n\n\n\n
<\/figure>\n\n\n\nIf your new role is similar to an existing role, it even gives you the ability to clone an existing role to save time. Then you can simply change the capabilities of your new role to suit your needs.<\/p>\n\n\n\n
New Capabilities on the other hand are a little more difficult. Yes, you can define them in the interface but unless there is code written to use the new capabilities they won\u2019t have any effect. Before you start adding capabilities, talk to your programmer.<\/p>\n\n\n\n
<\/span>WordPress User Roles Security<\/span><\/h2>\n\n\n\n
So as you\u2019ve seen it\u2019s really easy to add new roles and customize them to fit your needs. Just because it\u2019s easy though doesn\u2019t mean you should add a bunch of them willy-nilly. Before you start, sit down and decide why a new role is necessary.<\/strong> What will this new role be able to do or not do that is different from existing roles. The more roles you add, the more you have to manage. <\/p>\n\n\n\n
Also, there are 2 things you can do for better WordPress security<\/strong> in terms of user roles:<\/p>\n\n\n\n
Apply The Principle of Least Privilege<\/h3>\n\n\n\n
<\/figure>\n\n\n\nOnce you have decided to add a new role into your system make sure you adhere to the Principle of Least Privilege<\/a>. When creating roles, less is more<\/strong>. Only give your new roles the minimum capabilities they need to fulfil their role. If you are setting up an accounting role, don\u2019t give them the capability to Delete Posts. Stick with the minimum, you can always add later if you need to.<\/p>\n\n\n\n
Implement Two Factor Authentication (2FA)<\/h3>\n\n\n\n
<\/figure>\n\n\n\nFor every new role you setup that has significant permissions, make sure you setup and enforce Two Factor Authentication<\/a><\/strong> for those roles.\u00a0<\/p>\n\n\n\n
If the Administrator role is the only significantly powerful role you have, then the SiteGround Security Plugin<\/a> is a great option. It makes setting up 2FA for the Admin Role very simple. Here is a demo on how it works<\/a>.<\/p>\n\n\n\n
If you have other roles that have significant power or can see Personally Identifiable Information (PII) for other users, make sure they have 2FA enforced as well. There are several good (free) 2FA plugins out there that can help you do that.<\/p>\n\n\n\n
<\/span>Wrap Up<\/span><\/h2>\n\n\n\n
WordPress has a power user role and capability system that is flexible enough to meet almost any site\u2019s needs. Like any powerful tool though, you can do damage to your site. You can lock users out of capabilities they need to access the site or give users the power to do bad things.<\/p>\n\n\n\n
Before you start, stop, think, and then act. That is the winning strategy for managing user roles and capabilities in WordPress.<\/p>\n\n\n\n
[subscribe_cta]<\/p>\n","protected":false},"excerpt":{"rendered":"As WordPress has grown in popularity, application, and complexity, we have all discovered something very important, making everyone an administrator isn\u2019t a winning strategy. Thankfully WordPress provides us with a very powerful tool called User Roles and Capabilities that helps us give people just the capabilities they need without giving them too much or too…","protected":false},"author":81,"featured_media":15300,"comment_status":"open","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[2098,15],"tags":[],"class_list":["post-15277","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-hosting-insights","category-wordpress"],"yoast_head":"\n
All You Need to Know On WordPress User Roles And Capabilities To Manage Them Wisely - SiteGround<\/title>\n<meta name=\"description\" content=\"Learn which are the six main WordPress User Roles and their capabilities, who should get each, how to assign and edit them + tips to manage them securely.\" \/>\n<meta name=\"robots\" content=\"index, follow, max-snippet:-1, max-image-preview:large, max-video-preview:-1\" \/>\n<link rel=\"canonical\" href=\"https:\/\/newblog.siteground.com\/en\/wordpress-user-roles-and-capabilities\/\" \/>\n<meta property=\"og:locale\" content=\"en_US\" \/>\n<meta property=\"og:type\" content=\"article\" \/>\n<meta property=\"og:title\" content=\"All You Need to Know On WordPress User Roles And Capabilities To Manage Them Wisely\" \/>\n<meta property=\"og:description\" content=\"Learn which are the six main WordPress User Roles and their capabilities, who should get each, how to assign and edit them + tips to manage them securely.\" \/>\n<meta property=\"og:url\" content=\"https:\/\/newblog.siteground.com\/en\/wordpress-user-roles-and-capabilities\/\" \/>\n<meta property=\"og:site_name\" content=\"SiteGround\" \/>\n<meta property=\"article:publisher\" content=\"https:\/\/www.facebook.com\/siteground\" \/>\n<meta property=\"article:published_time\" content=\"2021-11-25T10:46:22+00:00\" \/>\n<meta property=\"article:modified_time\" content=\"2026-05-13T07:52:43+00:00\" \/>\n<meta property=\"og:image\" content=\"https:\/\/newblog.siteground.com\/en\/wp-content\/uploads\/sites\/2\/2021\/11\/fb-1200x630-1.jpg\" \/>\n<meta name=\"author\" content=\"Cal Evans\" \/>\n<meta name=\"twitter:card\" content=\"summary_large_image\" \/>\n<meta name=\"twitter:title\" content=\"All You Need to Know On WordPress User Roles And Capabilities To Manage Them Wisely\" \/>\n<meta name=\"twitter:description\" content=\"Learn which are the six main WordPress User Roles and their capabilities, who should get each, how to assign and edit them + tips to manage them securely.\" \/>\n<meta name=\"twitter:image\" content=\"https:\/\/newblog.siteground.com\/en\/wp-content\/uploads\/sites\/2\/2021\/11\/tw-1200x675-1.jpg\" \/>\n<meta name=\"twitter:creator\" content=\"@siteground\" \/>\n<meta name=\"twitter:site\" content=\"@siteground\" \/>\n<meta name=\"twitter:label1\" content=\"Written by\" \/>\n\t<meta name=\"twitter:data1\" content=\"Cal Evans\" \/>\n\t<meta name=\"twitter:label2\" content=\"Est. reading time\" \/>\n\t<meta name=\"twitter:data2\" content=\"13 minutes\" \/>\n<script type=\"application\/ld+json\" class=\"yoast-schema-graph\">{\"@context\":\"https:\/\/schema.org\",\"@graph\":[{\"@type\":\"Article\",\"@id\":\"https:\/\/newblog.siteground.com\/en\/wordpress-user-roles-and-capabilities\/#article\",\"isPartOf\":{\"@id\":\"https:\/\/newblog.siteground.com\/en\/wordpress-user-roles-and-capabilities\/\"},\"author\":{\"name\":\"Cal Evans\",\"@id\":\"https:\/\/newblog.siteground.com\/en\/#\/schema\/person\/b7d955fe8f207e8e13a00552dc043fff\"},\"headline\":\"All You Need to Know On WordPress User Roles And Capabilities To Manage Them Wisely\",\"datePublished\":\"2021-11-25T10:46:22+00:00\",\"dateModified\":\"2026-05-13T07:52:43+00:00\",\"mainEntityOfPage\":{\"@id\":\"https:\/\/newblog.siteground.com\/en\/wordpress-user-roles-and-capabilities\/\"},\"wordCount\":2255,\"commentCount\":0,\"publisher\":{\"@id\":\"https:\/\/newblog.siteground.com\/en\/#organization\"},\"image\":{\"@id\":\"https:\/\/newblog.siteground.com\/en\/wordpress-user-roles-and-capabilities\/#primaryimage\"},\"thumbnailUrl\":\"https:\/\/newblog.siteground.com\/en\/wp-content\/uploads\/sites\/2\/2021\/11\/blog-post-1200x600-2-1.jpg\",\"articleSection\":[\"Hosting Insights\",\"WordPress\"],\"inLanguage\":\"en-US\",\"potentialAction\":[{\"@type\":\"CommentAction\",\"name\":\"Comment\",\"target\":[\"https:\/\/newblog.siteground.com\/en\/wordpress-user-roles-and-capabilities\/#respond\"]}]},{\"@type\":\"WebPage\",\"@id\":\"https:\/\/newblog.siteground.com\/en\/wordpress-user-roles-and-capabilities\/\",\"url\":\"https:\/\/newblog.siteground.com\/en\/wordpress-user-roles-and-capabilities\/\",\"name\":\"All You Need to Know On WordPress User Roles And Capabilities To Manage Them Wisely - SiteGround\",\"isPartOf\":{\"@id\":\"https:\/\/newblog.siteground.com\/en\/#website\"},\"primaryImageOfPage\":{\"@id\":\"https:\/\/newblog.siteground.com\/en\/wordpress-user-roles-and-capabilities\/#primaryimage\"},\"image\":{\"@id\":\"https:\/\/newblog.siteground.com\/en\/wordpress-user-roles-and-capabilities\/#primaryimage\"},\"thumbnailUrl\":\"https:\/\/newblog.siteground.com\/en\/wp-content\/uploads\/sites\/2\/2021\/11\/blog-post-1200x600-2-1.jpg\",\"datePublished\":\"2021-11-25T10:46:22+00:00\",\"dateModified\":\"2026-05-13T07:52:43+00:00\",\"description\":\"Learn which are the six main WordPress User Roles and their capabilities, who should get each, how to assign and edit them + tips to manage them securely.\",\"breadcrumb\":{\"@id\":\"https:\/\/newblog.siteground.com\/en\/wordpress-user-roles-and-capabilities\/#breadcrumb\"},\"inLanguage\":\"en-US\",\"potentialAction\":[{\"@type\":\"ReadAction\",\"target\":[\"https:\/\/newblog.siteground.com\/en\/wordpress-user-roles-and-capabilities\/\"]}]},{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\/\/newblog.siteground.com\/en\/wordpress-user-roles-and-capabilities\/#primaryimage\",\"url\":\"https:\/\/newblog.siteground.com\/en\/wp-content\/uploads\/sites\/2\/2021\/11\/blog-post-1200x600-2-1.jpg\",\"contentUrl\":\"https:\/\/newblog.siteground.com\/en\/wp-content\/uploads\/sites\/2\/2021\/11\/blog-post-1200x600-2-1.jpg\",\"width\":1200,\"height\":600},{\"@type\":\"BreadcrumbList\",\"@id\":\"https:\/\/newblog.siteground.com\/en\/wordpress-user-roles-and-capabilities\/#breadcrumb\",\"itemListElement\":[{\"@type\":\"ListItem\",\"position\":1,\"name\":\"Home\",\"item\":\"https:\/\/newblog.siteground.com\/en\/\"},{\"@type\":\"ListItem\",\"position\":2,\"name\":\"All You Need to Know On WordPress User Roles And Capabilities To Manage Them Wisely\"}]},{\"@type\":\"WebSite\",\"@id\":\"https:\/\/newblog.siteground.com\/en\/#website\",\"url\":\"https:\/\/newblog.siteground.com\/en\/\",\"name\":\"SiteGround Blog\",\"description\":\"\",\"publisher\":{\"@id\":\"https:\/\/newblog.siteground.com\/en\/#organization\"},\"potentialAction\":[{\"@type\":\"SearchAction\",\"target\":{\"@type\":\"EntryPoint\",\"urlTemplate\":\"https:\/\/newblog.siteground.com\/en\/?s={search_term_string}\"},\"query-input\":{\"@type\":\"PropertyValueSpecification\",\"valueRequired\":true,\"valueName\":\"search_term_string\"}}],\"inLanguage\":\"en-US\"},{\"@type\":\"Organization\",\"@id\":\"https:\/\/newblog.siteground.com\/en\/#organization\",\"name\":\"SiteGround Blog\",\"url\":\"https:\/\/newblog.siteground.com\/en\/\",\"logo\":{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\/\/newblog.siteground.com\/en\/#\/schema\/logo\/image\/\",\"url\":\"https:\/\/newblog.siteground.com\/en\/wp-content\/uploads\/sites\/2\/2025\/01\/Siteground-Logo-on-white.jpg\",\"contentUrl\":\"https:\/\/newblog.siteground.com\/en\/wp-content\/uploads\/sites\/2\/2025\/01\/Siteground-Logo-on-white.jpg\",\"width\":1200,\"height\":400,\"caption\":\"SiteGround Blog\"},\"image\":{\"@id\":\"https:\/\/newblog.siteground.com\/en\/#\/schema\/logo\/image\/\"},\"sameAs\":[\"https:\/\/www.facebook.com\/siteground\",\"https:\/\/x.com\/siteground\",\"https:\/\/www.instagram.com\/siteground\/\",\"https:\/\/www.youtube.com\/@siteground\"]},{\"@type\":\"Person\",\"@id\":\"https:\/\/newblog.siteground.com\/en\/#\/schema\/person\/b7d955fe8f207e8e13a00552dc043fff\",\"name\":\"Cal Evans\",\"image\":{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\/\/newblog.siteground.com\/en\/#\/schema\/person\/image\/\",\"url\":\"https:\/\/secure.gravatar.com\/avatar\/b8191d355780536d1c461f7e25b75129?s=96&d=mm&r=g\",\"contentUrl\":\"https:\/\/secure.gravatar.com\/avatar\/b8191d355780536d1c461f7e25b75129?s=96&d=mm&r=g\",\"caption\":\"Cal Evans\"},\"sameAs\":[\"https:\/\/www.linkedin.com\/in\/calevans\/\"],\"url\":\"https:\/\/newblog.siteground.com\/en\/author\/calevans\/\"}]}<\/script>\n<!-- \/ Yoast SEO Premium plugin. -->","yoast_head_json":{"title":"All You Need to Know On WordPress User Roles And Capabilities To Manage Them Wisely - SiteGround","description":"Learn which are the six main WordPress User Roles and their capabilities, who should get each, how to assign and edit them + tips to manage them securely.","robots":{"index":"index","follow":"follow","max-snippet":"max-snippet:-1","max-image-preview":"max-image-preview:large","max-video-preview":"max-video-preview:-1"},"canonical":"https:\/\/newblog.siteground.com\/en\/wordpress-user-roles-and-capabilities\/","og_locale":"en_US","og_type":"article","og_title":"All You Need to Know On WordPress User Roles And Capabilities To Manage Them Wisely","og_description":"Learn which are the six main WordPress User Roles and their capabilities, who should get each, how to assign and edit them + tips to manage them securely.","og_url":"https:\/\/newblog.siteground.com\/en\/wordpress-user-roles-and-capabilities\/","og_site_name":"SiteGround","article_publisher":"https:\/\/www.facebook.com\/siteground","article_published_time":"2021-11-25T10:46:22+00:00","article_modified_time":"2026-05-13T07:52:43+00:00","og_image":[{"url":"https:\/\/newblog.siteground.com\/en\/wp-content\/uploads\/sites\/2\/2021\/11\/fb-1200x630-1.jpg","type":"","width":"","height":""}],"author":"Cal Evans","twitter_card":"summary_large_image","twitter_title":"All You Need to Know On WordPress User Roles And Capabilities To Manage Them Wisely","twitter_description":"Learn which are the six main WordPress User Roles and their capabilities, who should get each, how to assign and edit them + tips to manage them securely.","twitter_image":"https:\/\/newblog.siteground.com\/en\/wp-content\/uploads\/sites\/2\/2021\/11\/tw-1200x675-1.jpg","twitter_creator":"@siteground","twitter_site":"@siteground","twitter_misc":{"Written by":"Cal Evans","Est. reading time":"13 minutes"},"schema":{"@context":"https:\/\/schema.org","@graph":[{"@type":"Article","@id":"https:\/\/newblog.siteground.com\/en\/wordpress-user-roles-and-capabilities\/#article","isPartOf":{"@id":"https:\/\/newblog.siteground.com\/en\/wordpress-user-roles-and-capabilities\/"},"author":{"name":"Cal Evans","@id":"https:\/\/newblog.siteground.com\/en\/#\/schema\/person\/b7d955fe8f207e8e13a00552dc043fff"},"headline":"All You Need to Know On WordPress User Roles And Capabilities To Manage Them Wisely","datePublished":"2021-11-25T10:46:22+00:00","dateModified":"2026-05-13T07:52:43+00:00","mainEntityOfPage":{"@id":"https:\/\/newblog.siteground.com\/en\/wordpress-user-roles-and-capabilities\/"},"wordCount":2255,"commentCount":0,"publisher":{"@id":"https:\/\/newblog.siteground.com\/en\/#organization"},"image":{"@id":"https:\/\/newblog.siteground.com\/en\/wordpress-user-roles-and-capabilities\/#primaryimage"},"thumbnailUrl":"https:\/\/newblog.siteground.com\/en\/wp-content\/uploads\/sites\/2\/2021\/11\/blog-post-1200x600-2-1.jpg","articleSection":["Hosting Insights","WordPress"],"inLanguage":"en-US","potentialAction":[{"@type":"CommentAction","name":"Comment","target":["https:\/\/newblog.siteground.com\/en\/wordpress-user-roles-and-capabilities\/#respond"]}]},{"@type":"WebPage","@id":"https:\/\/newblog.siteground.com\/en\/wordpress-user-roles-and-capabilities\/","url":"https:\/\/newblog.siteground.com\/en\/wordpress-user-roles-and-capabilities\/","name":"All You Need to Know On WordPress User Roles And Capabilities To Manage Them Wisely - SiteGround","isPartOf":{"@id":"https:\/\/newblog.siteground.com\/en\/#website"},"primaryImageOfPage":{"@id":"https:\/\/newblog.siteground.com\/en\/wordpress-user-roles-and-capabilities\/#primaryimage"},"image":{"@id":"https:\/\/newblog.siteground.com\/en\/wordpress-user-roles-and-capabilities\/#primaryimage"},"thumbnailUrl":"https:\/\/newblog.siteground.com\/en\/wp-content\/uploads\/sites\/2\/2021\/11\/blog-post-1200x600-2-1.jpg","datePublished":"2021-11-25T10:46:22+00:00","dateModified":"2026-05-13T07:52:43+00:00","description":"Learn which are the six main WordPress User Roles and their capabilities, who should get each, how to assign and edit them + tips to manage them securely.","breadcrumb":{"@id":"https:\/\/newblog.siteground.com\/en\/wordpress-user-roles-and-capabilities\/#breadcrumb"},"inLanguage":"en-US","potentialAction":[{"@type":"ReadAction","target":["https:\/\/newblog.siteground.com\/en\/wordpress-user-roles-and-capabilities\/"]}]},{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/newblog.siteground.com\/en\/wordpress-user-roles-and-capabilities\/#primaryimage","url":"https:\/\/newblog.siteground.com\/en\/wp-content\/uploads\/sites\/2\/2021\/11\/blog-post-1200x600-2-1.jpg","contentUrl":"https:\/\/newblog.siteground.com\/en\/wp-content\/uploads\/sites\/2\/2021\/11\/blog-post-1200x600-2-1.jpg","width":1200,"height":600},{"@type":"BreadcrumbList","@id":"https:\/\/newblog.siteground.com\/en\/wordpress-user-roles-and-capabilities\/#breadcrumb","itemListElement":[{"@type":"ListItem","position":1,"name":"Home","item":"https:\/\/newblog.siteground.com\/en\/"},{"@type":"ListItem","position":2,"name":"All You Need to Know On WordPress User Roles And Capabilities To Manage Them Wisely"}]},{"@type":"WebSite","@id":"https:\/\/newblog.siteground.com\/en\/#website","url":"https:\/\/newblog.siteground.com\/en\/","name":"SiteGround Blog","description":"","publisher":{"@id":"https:\/\/newblog.siteground.com\/en\/#organization"},"potentialAction":[{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https:\/\/newblog.siteground.com\/en\/?s={search_term_string}"},"query-input":{"@type":"PropertyValueSpecification","valueRequired":true,"valueName":"search_term_string"}}],"inLanguage":"en-US"},{"@type":"Organization","@id":"https:\/\/newblog.siteground.com\/en\/#organization","name":"SiteGround Blog","url":"https:\/\/newblog.siteground.com\/en\/","logo":{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/newblog.siteground.com\/en\/#\/schema\/logo\/image\/","url":"https:\/\/newblog.siteground.com\/en\/wp-content\/uploads\/sites\/2\/2025\/01\/Siteground-Logo-on-white.jpg","contentUrl":"https:\/\/newblog.siteground.com\/en\/wp-content\/uploads\/sites\/2\/2025\/01\/Siteground-Logo-on-white.jpg","width":1200,"height":400,"caption":"SiteGround Blog"},"image":{"@id":"https:\/\/newblog.siteground.com\/en\/#\/schema\/logo\/image\/"},"sameAs":["https:\/\/www.facebook.com\/siteground","https:\/\/x.com\/siteground","https:\/\/www.instagram.com\/siteground\/","https:\/\/www.youtube.com\/@siteground"]},{"@type":"Person","@id":"https:\/\/newblog.siteground.com\/en\/#\/schema\/person\/b7d955fe8f207e8e13a00552dc043fff","name":"Cal Evans","image":{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/newblog.siteground.com\/en\/#\/schema\/person\/image\/","url":"https:\/\/secure.gravatar.com\/avatar\/b8191d355780536d1c461f7e25b75129?s=96&d=mm&r=g","contentUrl":"https:\/\/secure.gravatar.com\/avatar\/b8191d355780536d1c461f7e25b75129?s=96&d=mm&r=g","caption":"Cal Evans"},"sameAs":["https:\/\/www.linkedin.com\/in\/calevans\/"],"url":"https:\/\/newblog.siteground.com\/en\/author\/calevans\/"}]}},"_links":{"self":[{"href":"https:\/\/newblog.siteground.com\/en\/wp-json\/wp\/v2\/posts\/15277","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/newblog.siteground.com\/en\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/newblog.siteground.com\/en\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/newblog.siteground.com\/en\/wp-json\/wp\/v2\/users\/81"}],"replies":[{"embeddable":true,"href":"https:\/\/newblog.siteground.com\/en\/wp-json\/wp\/v2\/comments?post=15277"}],"version-history":[{"count":15,"href":"https:\/\/newblog.siteground.com\/en\/wp-json\/wp\/v2\/posts\/15277\/revisions"}],"predecessor-version":[{"id":24784,"href":"https:\/\/newblog.siteground.com\/en\/wp-json\/wp\/v2\/posts\/15277\/revisions\/24784"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/newblog.siteground.com\/en\/wp-json\/wp\/v2\/media\/15300"}],"wp:attachment":[{"href":"https:\/\/newblog.siteground.com\/en\/wp-json\/wp\/v2\/media?parent=15277"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/newblog.siteground.com\/en\/wp-json\/wp\/v2\/categories?post=15277"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/newblog.siteground.com\/en\/wp-json\/wp\/v2\/tags?post=15277"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}
- Create or delete users & manage their permissions