By default WordPress has a user role management system. Knowing these user roles and permissions are essential as your WordPress site grows.
There are five default user roles:
The five default user roles are:
- Administrator – Has access to all administrative options and features. It is the most powerful user role among other user role. Users with the administrator role can add new posts, edit any posts by any users on the site, and even delete those posts.Administrator can be install, edit, and delete plugin as well as themes. Administrator can add new user to the site This role is basically reserved for site owners and gives you the full control of your WordPress site. If you are running a multi-user WordPress site, then you need to be very careful who you assign an administrator user role.
- Editor – Can manage and publish posts. Editors review posts submitted by contributors and then schedule them for review. Users with the editor role in WordPress have full control on the content sections your website. They can add, edit, publish, and delete any posts on a WordPress site including the ones written by others. An editor can moderate, edit, and delete comments as well.
- Author – Can publish their own posts when they wish. As the name suggests, users with the author role can write, edit, and publish their own posts. They can also delete their own posts, even if they are published.
- Contributor – Can write posts but cannot publish them. Instead, they need to submit their posts for review. Contributors can add new posts and edit their own posts, but they cannot publish any posts not even their own. When writing posts they cannot create new categories and will have to choose from existing categories. However, they can add tags to their posts.The biggest disadvantage of a contributor role is that they cannot upload files.Contributors can view comments even those awaiting moderation. But they cannot approve or delete comments.
- Subscriber – Has basic functionality such as changing their profile and leaving comments. Users with the subscriber user role can login to your WordPress site and update their user profiles. They can change their passwords if they want to. They cannot write posts, view comments, or do anything else inside your WordPress admin area.This user role is particularly useful if you require users to login before they can read a post or leave a comment.