iTechGuides is reader-supported. When you buy through links on our site, we may earn an affiliate commission. As an Amazon Associate I earn from qualifying purchases. Learn more
Give each collaborator the least-powerful WordPress role that still lets them complete their work. Use Contributor for draft-only writers, Author for people who publish their own posts, and Editor for someone who manages and publishes other users’ content. Reserve Administrator for site-wide administration and Super Admin for Multisite network control.
That choice is a starting point, not a complete security design. WordPress checks individual capabilities—such as edit_posts or publish_posts—when a user performs an action. Map the work to capabilities, assign the narrowest suitable role, test the real workflow, and remove access when responsibilities change.
Roles and capabilities: the distinction that prevents over-permissioning
A WordPress role is a named bundle of permissions. A capability is one permission that WordPress checks before allowing an action. The same role label can therefore behave differently on a customized installation, and a custom role can be built from a deliberately selected set of capabilities.
Quick wins for a faster PC:
Fix the driver behind crashes, sound loss and screen glitchesFind Drivers →Repair Windows errors before they cause bigger problemsFix Now →WordPress supplies six predefined roles: Super Admin, Administrator, Editor, Author, Contributor, and Subscriber. They are not a simple seniority ladder. Choose according to the work a person must perform, not their job title. The official role and capability reference is at WordPress.org’s Roles and Capabilities documentation; the developer explanation is in the User Roles and Capabilities handbook.
#1 Best Overall
- Powerful Turbo Fan:CAGIWIRU Electric Air Duster have reached speed up to 130000RPM,Can efficient remove dust and debris.With LED light and Three Adjustable Speed to meet with different cleaning tasks.
- With Attached USB C Fasting Charging cable.Charing 3 hours,Enjoy up to 240 minutes of use on the lowest setting, For third speed can use for 25mins.with four charging options to meet with your needs.
- Wide Application: attached 5 different nozzles,making it suitable for a variety of scenes, such as car,pet, pc, keyboards, and other electronic devices. It also serves for office and home clean duster.
- Handy Design & Portable:Cordless air duster electric nozzle is Light weight and small size, design and comfortable to hold and space saving, convenient to carry around. You can put it in your room or inside the car without taking up space.
- Economical &Reusable: Built durable materials with a long-lasting battery,our CAGIWIRU air duster it's a sustainable alternative to disposable air cans.
WordPress.org’s core rule is: “Only grant the capabilities required for the tasks the role is intended to perform.” Apply that rule to every collaborator, including trusted staff and temporary contractors.
Match the collaboration job to a starting role
| Collaboration task | Usual starting role | Boundary to verify |
|---|---|---|
| Read the site and manage a personal profile | Subscriber | No editorial capabilities are granted by default. |
| Write and manage personal drafts while another person publishes | Contributor | Cannot publish posts by default. |
| Publish and manage personal posts | Author | Does not manage other users’ posts by default. |
| Manage and publish posts from multiple authors | Editor | Broad editorial power includes other users’ content and comment moderation. |
| Install or manage plugins and themes, change site settings, and administer users | Administrator | Broad site access is unnecessary for ordinary editorial work. |
| Manage a WordPress Multisite network | Super Admin | Network capabilities are distinct from an individual site Administrator account. |
Contributor for submit-and-review workflows
A Contributor can create and manage their own posts but cannot publish them by default. This is the normal fit when a writer submits drafts and an editor or administrator handles review, scheduling, and publication. Confirm the hand-off with a test account: the contributor should be able to save and revise a draft, while the publish control is unavailable or blocked.
Author for independent publishing
An Author can publish and manage their own posts. Use this when a person is responsible for the complete lifecycle of their own articles and does not need to revise another author’s work. If the person also needs to edit peers’ drafts, move to an Editor-level design or create a narrowly customized role instead of assuming Author includes that access.
Editor for a content desk
An Editor is intended for users who coordinate content from several authors. The role includes management of other users’ posts and pages and broad editorial functions such as comment moderation. It still should not be used merely because someone needs to write articles; an Editor can affect work well beyond their own drafts.
Subscriber for non-editorial accounts
Subscriber is appropriate for a reader, client, or member who needs an account and profile management but no publishing tools. If a Subscriber sees an unexpected editorial menu, inspect customized capabilities rather than relying on the label.
Administrator and Super Admin are administrative roles
On a single-site installation, an Administrator has extensive site powers, including plugin and theme installation and management. Do not assign Administrator simply to make someone an editor. In Multisite, a site Administrator does not have every network capability; network-wide control belongs to Super Admin.
Design the permission boundary before creating accounts
Write down the actions each collaborator actually needs. A useful inventory includes:
What’s actually slowing this PC down?
Pick the symptom - the matching free tool is one click away.
Rank #2
- Screen Cleaner is Your Screen’s New Bestfriend! - EVEO is proud to present a screen cleaner that’s perfectly suited for your TV. Meet your new screen cleaner, computer screen cleaner, laptop cleaner, iPad cleaner, Macbook,tv cleaner or any other electronic device. Our screen cleaner spray and wipe along with the included plush microfiber cloth, easily removes dust, fingerprints & other smudges on the screen’s surface. Clean effectively for a streak-free screen
- Gentle on your Screens - Our screen cleaner spray and wipes is compatible to be used even for the most sensitive LCD, LED, CRT, and OLED screens in proper use. Be at ease knowing that this product is compatible with all the major brands: LG, SONY, Samsung, Sharp, iPad, iPhone, Android screens, Kindle, PC monitors - we’ve got you covered! Can be used as LCD screen cleaner, tv cleaner, smart tv screen cleaner, and more
- Premium Super Soft Plush Microfiber Cloth - Included in this efficient screen cleaning kit. This screen cleaner spray and wipe has our signature plush microfiber cloth specially designed to comply with screens and monitors and leave them streak-free. Has been shown to effectively absorbs stubborn stains, zero streaks, and no fiber shedding. Always use this together with our screen cleaner for the best results
- Easy-to-Use Screen Cleaner Kit + microfiber cleaning cloth - The EVEO Screen Cleaning Kit will easily be your new favorite tool when it comes to taking care of the things you love most, quick and easy solution for a streak-free screen. Simply screw on the sprayer gun on the screen cleaner bottle. Spray the cleaning liquid onto the microfiber cloth, then wipe the screen until desired cleanliness & shine is achieved.
- Quality Screen Care Kit Worth Purchasing - Enjoy a convenient Screen Cleaner anytime, anywhere you need it. Your satisfaction is our top priority. We stand behind the quality of our products and that’s why, you shouldn’t be worrying at all. We manufacture the Best Screen Cleaner. and can be used for laptop cleaning kit, laptop screen cleaner, tv screen cleaner for smart tv. MacBook screen cleaner, monitor cleaner or screen cleaner spray for electronic devices with microfiber cleaning cloth
- Create, save, and revise drafts.
- Edit only personal posts or edit other users’ posts and pages.
- Publish or schedule content.
- Upload media.
- Moderate comments.
- Manage users or change site settings.
- Install, update, or configure plugins and themes.
- Edit templates and navigation in the Site Editor.
For each action, ask whether it is needed on every post or only on content the person owns. “Can edit posts” and “can edit other users’ posts” are separate authorization questions. The same applies to a site-level task and a network-level task in Multisite.
Use the least powerful built-in role that covers the list. A common review workflow is Contributor plus an Editor or Administrator who reviews and publishes. If the person must publish personal work, Author may be sufficient. If no predefined role fits without unrelated powers, plan a custom role and test it as a separate change rather than granting Administrator as a shortcut.
Add a user and assign the role
You need an account with permission to manage users. Labels can vary slightly by WordPress version, language, and installed plugins, so confirm the wording shown in your dashboard.
- Open the Users screen. In the dashboard, go to Users and choose Add New for a new account, or open an existing user for editing. The official screen reference is Users screen.
- Enter the account details. Supply a username, email address, and a strong password or the password-reset option provided by the screen. Use the collaborator’s individual account; do not share an administrator login.
- Select the role. Choose Subscriber, Contributor, Author, Editor, or Administrator according to the task inventory. Super Admin assignment is handled at the network level in Multisite, not as an ordinary site-role choice.
- Save and communicate the workflow. Tell the collaborator what they can do, where drafts are submitted, and who performs review or publication. Avoid promising access to screens that the selected role does not provide.
- Set the default for future registrations only when appropriate. Go to Settings > General and review New User Default Role. Changing this setting affects newly registered users; it does not redesign existing accounts. Leave it at the least privileged role that matches your registration process.
After saving, reopen the user record and confirm the role. A plugin, membership system, or custom code may add or remove capabilities, so the displayed role is not the end of the verification process.
Test the real workflow with a non-administrator account
Role assignment is complete only after the intended actions and the forbidden actions have been tested. Use a test account that has the same role, or temporarily create one for the purpose. Do not test by downgrading your only administrator account.
- Sign in as the collaborator, or use a separate browser profile so an administrator session cannot mask restrictions.
- Create a representative post and save it as a draft.
- Try the actions the person needs: revise the draft, upload an allowed media file, submit it for review, publish it if the role is supposed to publish, and edit a relevant page if that is part of the assignment.
- Try one action that must be blocked, such as publishing a Contributor draft, editing another author’s post as an Author, or opening plugin settings as an Editor.
- Check the front end and editorial screens after the test. A hidden menu item is not proof of authorization; the server must also reject a direct request when the capability is absent.
- Record the result and repeat the test after any role or capability change.
Keep the test focused on outcomes, not on assumptions about labels. Capability checks can be altered by plugins, themes, custom code, or network configuration.
Give access to the Site Editor carefully
The Site Editor is available when a block theme is active. WordPress identifies edit_theme_options as the primary capability for opening the Site Editor and its navigation. Depending on the operation, a user may also need edit_posts, edit_pages, edit_others_posts, read, or upload_files. See the capability definitions in the official role reference.
Rank #3
- 【Large size】：Measuring 800 x 300 mm/ 31. 5×12 inches, which is wider and taller than others. Large mouse pad can perfectly fit your keyboard and mouse of any size, and there is also ample space for peripherals such as phones, tablets, etc.
- 【LED backlight mouse pad】：Blade Hawks RGB mouse pad provides 7 static modes and 7 dynamic modes will give you the options you are looking for. Power-off memory function remembers the last lighting mode you selected. The super glow fiber Chroma will give you a colorful gaming setup that you want.
- 【Anti-slip rubber base】：Made from Natural rubber, this gaming mousepad will firmly grip your desktop, allowing you to enjoy the ultimate precision in the games you are most passionate about. It also comes with a texture that enhances this ability even further.
- 【Smooth and waterproof surface】: Micro-textured cloth surface, for extremely precise mouse control and a smooth movement. When liquid splashes on the gaming mouse pad, it forms water droplets and slides down. Will not delay your work or gameplay.
- 【Plug and play】: This mouse and keyboard pad is powered by USB, plug and play, no driver required. One button control light modes. Press one time to change the lighting mode, press twice to change the brightness, press and hold about 3 seconds turn ON/OFF.
edit_theme_options is not a narrow “templates only” permission. It also enables broader theme-related administrative functionality. Grant it only after deciding that the collaborator should have that wider reach, and test both opening and saving the exact templates, styles, or navigation items they are expected to change.
PC Slower Than It Used to Be?
A free scan shows the junk files, broken settings and background clutter dragging Windows down - then fixes them in one click.Free scan · Windows 10 & 11Outdated Drivers Are Slowing You Down
One free scan finds every outdated or missing driver and matches the right update for your exact hardware.Free scan · exact hardware matchWhen the Site Editor opens but a section will not load
The Site Editor uses REST API endpoints. A custom role may see the interface yet receive a 401 or 403 response when a section loads or saves. Inspect the browser’s network response and the REST error message, then identify the capability required by that specific endpoint. Add the narrow capability that matches the operation; do not add broad administrative capabilities merely to make the error disappear.
When a collaborator should edit content but not templates
Do not add edit_theme_options just because the person needs to create or edit posts. Keep the account on the content role that matches its work. Separate a content workflow from a design-system or template workflow, and use different accounts or a carefully scoped custom role when those duties belong to different people.
Create a custom role when built-in roles do not fit
Custom roles are justified when the required combination cannot be represented by Subscriber, Contributor, Author, Editor, or Administrator. For example, a site may need a role that can upload media and edit a particular class of content but cannot publish or manage users. Define the required capabilities first, then implement and test the role.
WordPress documents add_role() and remove_role() for role management, and role methods such as add_cap() and remove_cap() for capability changes. The implementation guidance is in the Plugin Handbook and the Common APIs Handbook.
Free tools Windows power users keep installed
One-click scans. No signup required.
Example: register a narrowly scoped role
The following example illustrates the API shape. Choose capabilities only after mapping them to tested tasks, and run role-registration code from a controlled plugin or deployment process rather than editing a theme casually.
<?php
add_role(
'copy_reviewer',
'Copy reviewer',
array(
'read' => true,
'edit_posts' => true,
'edit_others_posts' => true,
'upload_files' => true,
)
);
?>This example does not grant publish_posts, manage_options, activate_plugins, or edit_theme_options. Those omissions are intentional: add a capability only when a tested requirement calls for it.
Rank #4
- 【Softer and More Comfortable】Vaydeer wrist rest has unique diamond pattern, which is the combination of softness and aesthetics. The materials of wrist rest are improved into higher quality memory foam and covered with silky smooth lycra. The computer wrist rest makes you as comfortable and cushiony as like rest your wrists on clouds.
- 【Ergonomic Wrist Saver】The wrist rests for keyboard and mouse comes with a 17.32×3.15×0.83 inch keyboard wrist pad and a 5.94×3.15×0.83 inch mouse wrist support. Based on ergonomic design, the unique concave shape is the perfect fit for your wrist joints. The wrist rest pad fits most computer keyboards and laptops, improve hand and wrist posture, release your wrist and arm stress.
- 【Non-Slip Rubber Bottom】Featuring an anti-skid silicone base on the bottom, this wrist keyboard support stays firmly in place on your desk, preventing the padding from sliding around, ensuring stable and consistent wrist support during extended computer sessions.
- 【Better Experience & Pain Relief】Our keyboard arm rest is beneficial to alleviate the soreness caused by direct contact and friction between your arm and a hard desk surface, reducing the risk of wrist fatigue or carpal tunnel. The soft texture of memory foam can evenly distribute the pressure around your wrists and provide good support with just enough give.
- 【Helpful in Multiple Scenarios】Whether you're working, studying, writing, typing, gaming, this keyboard and mouse rest combo is an essential accessory to add comfort and support to your hands and wrists. It’s also a great gift for men, women, family, friend, coworker, gamer, teacher, etc.
Change or retire a capability
Use a role object to add or remove a capability deliberately:
<?php
$role = get_role( 'copy_reviewer' );
if ( $role ) {
$role->add_cap( 'edit_pages' );
$role->remove_cap( 'edit_others_posts' );
}
?>Capabilities can have effects broader than their names suggest, especially when custom post types, plugins, or REST endpoints are involved. Test the actual dashboard screens, direct requests, publishing flow, media handling, and front-end result after every change. When a role is no longer needed, remove it with remove_role() only after moving its users to an intentional replacement role.
Check capabilities in code, not role labels
Authorization logic should check the capability required for the action rather than assuming that a role name is sufficient. A role can be renamed, customized, or augmented. Capability checks also make the code clearer when the same operation is available to users with different roles.
Independent reader supportYour contribution helps us test, update, and keep practical guides available for everyone.Account for Multisite boundaries
In a Multisite network, distinguish a user’s role on one site from network-level authority. A site Administrator can manage that site within the limits imposed by Multisite, but network configuration and network-wide capabilities are reserved for Super Admins. Do not promote a collaborator to Super Admin to solve a site-specific editorial problem.
When adding a user to a network, verify which individual sites they belong to and what role they hold on each site. Test the account in the target site and separately confirm that network administration remains unavailable unless it is genuinely part of the person’s job.
Review and remove access as work changes
Permissions should follow current responsibilities, not historical trust. Schedule a review when someone changes teams, finishes a contract, stops publishing, or takes on design duties.
The Tool Desk
Outbyte PC Repair FREERepair Windows errors before they cause bigger problemsFix Now →Outbyte Driver Updater FREEFix the driver behind crashes, sound loss and screen glitchesFind Drivers →- List every active user and the role assigned on each site.
- Compare the role with the person’s current task inventory.
- Downgrade publishing or administrative access that is no longer required.
- Remove accounts that are no longer needed, following your organization’s retention and hand-off procedures.
- Re-test shared workflows after a role change, especially editorial queues and Site Editor access.
- Document custom capabilities and the code or deployment that manages them.
For a departing writer, transferring unfinished drafts and then removing access is safer than leaving an Author or Editor account active “just in case.”
Best Value
- 【No Drill Mounted】Cable management tray can be assembled in as little as 3 minutes or less-simply. Side clips easily clampe the edge of desk, pass through the holes on the sides, and secure excess cables with baskets. Desk cable management supports inward or outward installation to meet your needs in different scenarios, and provides you with great convenience when collecting and organizing wires.
- 【Rubber Pad Protects Desk】Wire organizer under desk built-in soft rubber pads on the clamp protect your desk from scratches, so you will not damage your furniture or office.
- 【Sturdy and Beautiful】Cord management under desk is made of high-quality carbon steel and holds about 15 lbs. The wire basket has 2 holes on each side of the tray to enable your cables to pass freely. Cable baskets are suitable for desk thickness use from 0.4" to 2.4".
- 【Space Saving & Keep Organized】Desk cable management tray holds all your power cords, outlet strips, USB hubs and computer transformers hidden from your feet, and the data cables will not enter the vacuum cleaner to keep your desk clean and tidy. Desk wire organizer is also suitable for use in the kitchen and outdoors.
- 【Reduce Safety Risks】Cable tray under desk keeps all plugs away from your kids, no more worry about tripping. Using 2 holes wire tray saves extra space, helps you easily cabling and wire protection. The mesh design is not easy to accumulate dust, but avoids safety accidents caused by messy wires.
Troubleshoot common permission problems
“The contributor can publish.”
Check whether a plugin or custom role modification added publish_posts or an equivalent capability. Confirm the account’s actual role and test in a clean session. Remove the extra capability from the role that should remain draft-only, then repeat the blocked-action test.
“The author cannot edit a colleague’s post.”
This is expected for the default Author boundary. If cross-author editing is a real requirement, evaluate Editor or a custom role with the precise cross-author capability needed. Do not grant Administrator as a workaround.
“The editor sees no plugin or theme settings.”
That restriction is normally appropriate. Editor is an editorial role, not a site-administration role. If the person needs one administrative function, identify its specific capability and consider a custom design; granting Administrator exposes unrelated settings and installation powers.
Do these 3 things before closing this tab:
1Fix the driver behind crashes, sound loss and screen glitches2Repair Windows errors before they cause bigger problems3Scan for outdated or missing drivers - takes under a minute“The Site Editor menu is missing.”
Confirm that a block theme is active and that the account has edit_theme_options. Before granting it, decide whether the collaborator should also have the broader theme-related functionality associated with that capability. If the task is content-only, keep the content role instead.
“The Site Editor opens, but saving returns 401 or 403.”
Inspect the failing REST request and its error message. Determine whether the operation needs edit_posts, edit_pages, edit_others_posts, read, upload_files, or another endpoint-specific capability. Add only the missing requirement, then retest the exact save operation.
“The role looks correct, but access is still wrong.”
Review custom code, plugins, themes, and Multisite context. A role’s displayed name does not reveal every capability it has, and a capability may be granted or removed outside the Users screen. Compare the effective capabilities with the intended task list and test from a separate session.
A maintainable collaboration standard
Keep a short permission record for each role: its purpose, allowed actions, deliberately excluded actions, and the person responsible for reviewing it. Prefer built-in roles when they fit, use custom capabilities only for a documented gap, and validate both successful and rejected actions after changes. This produces a workflow in which writers can work without unnecessary administrative access, editors can manage the content they are accountable for, and design or network privileges remain limited to the people who truly need them.
Recommended Free Tools
Quick Recap
Product prices and availability are accurate as of the date/time indicated and are subject to change. Any price and availability information displayed on Amazon at the time of purchase will apply.
