WordPress has five default user roles: Administrator (full control), Editor (manages all content), Author (publishes their own posts), Contributor (writes posts but cannot publish) and Subscriber (can only manage their profile). WooCommerce adds Shop Manager and Customer. Give every person the lowest role that lets them do their job, and never share one admin login between people.
- Administrator: everything, including plugins and users.
- Editor: all posts and pages, no settings.
- Author: own posts only.
- Contributor: drafts only, needs approval.
- One person, one account, lowest role needed.
What can each role do?
| Role | Can do | Use for |
|---|---|---|
| Administrator | Everything | Owner and trusted developer |
| Editor | Publish and edit all content | Marketing manager |
| Author | Publish own posts, upload media | Regular writer |
| Contributor | Write drafts | Guest writer |
| Subscriber | Profile only | Members, commenters |
| Shop Manager (WooCommerce) | Products and orders | Store staff |
Live 1-to-1 WordPress and Elementor lessons on your own site, from $40. Every lesson recorded. Beginners welcome.
Why does this matter for security?
Picture a café where five staff share one admin password. One of them installs a free “SEO booster” plugin that turns out to contain malware, and nobody knows who did it. With separate Editor accounts for staff and a single administrator, that plugin could never have been installed. Separate accounts also let you remove access instantly when someone leaves.
How do you add a user?
- Users, Add New.
- Enter username and email, generate a strong password.
- Choose the role and click Add New User.
For Elementor-specific restrictions, see Elementor Role Manager.
Want to learn WordPress faster with a tutor?
I teach WordPress and Elementor 1-to-1 over Zoom or Google Meet, on your own website, at your pace. Lessons start at $40, every lesson is recorded so you can rewatch it, and you get a short checklist afterwards. Beginners, business owners, students and freelancers are all welcome. See lessons and prices or book a free intro call.
Frequently asked questions
What are the WordPress user roles?
Administrator, Editor, Author, Contributor and Subscriber by default; WooCommerce adds Shop Manager and Customer.
What role should I give a staff member?
Usually Editor for content work, or Shop Manager for store staff.
Should I share my admin password?
No. Create separate accounts with the lowest role each person needs.
Can I create custom roles?
Yes, with a role editor plugin, though default roles fit most sites.
Sources
Live 1-to-1 WordPress and Elementor lessons on your own site, from $40. Every lesson recorded. Beginners welcome.
More WordPress guides
Guide, 3 min readWordPress and Elementor Tutoring: Your Questions Answered
Guide, 3 min readWordPress Multisite Explained: Who Needs It (and Who Does Not)
Guide, 3 min readWordPress Comments and Spam: Settings That Keep Your Site Clean
Guide, 3 min readHow to Move WordPress to HTTPS (SSL) and Fix Mixed ContentRather have an expert run your WordPress site?
Tanvir H is a Bangladesh-based WordPress and Elementor web designer with 7+ years of experience, 650+ projects and a 4.9 client rating. New websites, redesigns, fixes, speed, security and SEO, handled by one expert who explains everything in plain English and works with clients worldwide.



