Overview
WordPress includes six default user roles, each with specific permissions and capabilities. Understanding these roles is essential for configuring role-based redirection and managing user access.
The Six Default WordPress Roles
Administrator
Complete control over the entire WordPress site including settings, themes, plugins, and all content.
- Install/activate/delete plugins and themes
- Manage all users and roles
- Access all admin settings
- Publish, edit, delete any content
- Import/export data
- Update WordPress core
- Site owners
- Lead developers
- IT managers
/wp-admin/ (WordPress dashboard)
Editor
Full control over all website content but no access to site settings or plugins.
- Publish, edit, delete any posts/pages
- Moderate comments
- Manage categories and tags
- Upload media files
- Cannot: Install plugins, change settings, manage users
- Content managers
- Editorial directors
- Senior writers
/wp-admin/edit.php (Posts management)
/content-management/ (Custom dashboard)
Author
Can write, publish, and manage their own posts only.
- Write and publish their own posts
- Edit and delete their own posts
- Upload images and media
- Cannot: Edit others’ posts, manage site settings
- Blog writers
- Guest contributors
- Regular columnists
/wp-admin/edit.php?post_type=post (Their posts)
/my-articles/ (Custom page showing their content)
Contributor
Can write posts but cannot publish them—requires editor approval.
- Write posts (saved as drafts)
- Edit their own unpublished posts
- Cannot: Publish posts, upload media, delete published posts
- Freelance writers
- Occasional contributors
- Interns
/wp-admin/edit.php (Draft submissions)
/pending-submissions/ (Custom page)
Subscriber
Can only read content and manage their own profile. No posting or admin capabilities.
- Read all content
- Edit their own profile
- Cannot: Create content, access admin features
- Newsletter subscribers
- Forum members
- Free membership users
- Registered readers
/member-dashboard/ (Custom member area)
/my-account/ (Profile page)
/member-content/ (Exclusive content)
Most Common for Custom Login Pages:This role is most frequently used for membership sites and community platforms.
Customer (WooCommerce)
Created by WooCommerce plugin—has Subscriber permissions plus order management.
- Everything Subscriber can do
- View order history
- Manage shipping addresses
- Download digital products
- Cannot: Create content or access admin
- Online store customers
- Digital product buyers
- Service purchasers
/my-account/ (WooCommerce account page)
/customer-portal/ (Custom page)
Role Comparison Table
| Role | Create Content | Publish Content | Manage Users | Install Plugins | Best For |
|---|---|---|---|---|---|
| Administrator | ✅ | ✅ | ✅ | ✅ | Site owners, developers |
| Editor | ✅ | ✅ | ❌ | ❌ | Content managers |
| Author | ✅ | ✅ (own only) | ❌ | ❌ | Blog writers |
| Contributor | ✅ (drafts) | ❌ | ❌ | ❌ | Guest writers |
| Subscriber | ❌ | ❌ | ❌ | ❌ | Members, readers |
| Customer | ❌ | ❌ | ❌ | ❌ | Store shoppers |
Checking User Roles
View User’s Role
Method 1: Users Menu- Go to: WordPress Admin → Users → All Users
- Find user in list
- Check “Role” column
- Go to: Users → All Users
- Click user’s name
- Scroll to “Role” dropdown
Assigning Roles
Change User’s Role
Steps:- Navigate to Users → All Users
- Hover over user, click “Edit”
- Scroll to “Role” dropdown
- Select new role
- Click “Update User”
Bulk Change Roles
For multiple users:- Go to Users → All Users
- Check boxes next to users
- Select “Change role to…” from dropdown
- Choose new role
- Click “Change”
Custom Roles
From Membership Plugins
Many plugins create custom roles:
MemberPress:- Creates roles based on membership levels
- Example: “Gold Member”, “Premium Member”
- Custom subscription-based roles
- Example: “Free Member”, “Pro Member”
- Plan-based roles
- Example: “Silver Member”, “Gold Member”
Using Custom Roles with Attributes
Attributes User Access automatically recognizes all custom roles—including those created by membership plugins. Just configure redirects for them like default roles.
Role Priority in Multi-Role Scenarios
When Users Have Multiple Roles
Priority Order (highest to lowest):- Administrator
- Editor
- Author
- Contributor
- Subscriber/Customer
- Custom roles (alphabetical)
If a user is both “Editor” and “Subscriber”:
- System uses Editor redirect
- User has Editor capabilities
Best Practices
Choosing the Right Role
- Start minimal: Assign lowest necessary role
- Upgrade as needed: Easier than removing permissions
- Regular audits: Review user roles quarterly
- Document decisions: Keep record of role assignments
Security Recommendations
- Limit Administrator accounts (2-3 maximum)
- Never use Administrator for regular content creation
- Use Author or Editor for writers
- Review user list regularly for inactive accounts
- Remove or downgrade unnecessary privileges
Common Scenarios
Scenario 1: Blog with Guest Writers
Administrator: Site owner (1)
Editor: Managing editor (1)
Author: Regular columnists (3-5)
Contributor: Guest writers (unlimited)
Subscriber: Newsletter readers (unlimited)
Scenario 2: Membership Site
Administrator: Site owners (2)
Subscriber: Free members (unlimited)
Custom Role (Premium Member): Paid members (unlimited)
Scenario 3: E-Commerce Store
Administrator: Store owners (2)
Shop Manager: Store staff (2-3)
Customer: Shoppers (unlimited)
Scenario 4: Corporate Intranet
Administrator: IT team (2-3)
Editor: Department heads (5-10)
Author: Department staff (20-50)
Subscriber: All employees (unlimited)
