14. Users & Roles

To modify an existing user, click anywhere within the row for that user to open the Manage access to sites modal. You can edit the Name of the user as well as add any Notes. The sites that this user can access will be listed, with checkmarks indicating sites the user can access, and plus (+) signs indicating sites to which the user does not have access but can be added.

Choose Access All Sites and the user will be able to access all sites connected to the user’s Hub. Note that this only applies to current sites. If you want the user to have access to all current sites as well as all future sites, please add the Access to all sites capability to the user’s role. You can find more information on the Access to all sites capability here.

To provide access to only some of these sites, choose Access to Selected Sites and then click the plus (+) sign next to the sites for which access is desired.

Click the “View & Edit All” dropdown to see the available role options for this user. The dropdown menu will display the default roles View & Edit-All and View Only-All and any custom roles that have been created. Simply click the desired role to assign it to the current user.

You can also remove the user by clicking Delete user.

After making changes, scroll to the bottom of the modal and click the Update button to save your changes or click Cancel to close without saving.

If you haven’t created a Hub user, click the Add first User button to open the user creation modal. Subsequent users can be created using the New user button.

Configuring a new Hub user involves:

• Email Address – Users are invited to accept Hub access in a confirmation email and must confirm the invite before access is granted. Each user must be invited individually, although multiple users can be assigned the same user role.
• Name – Give your user a name to help distinguish it from others in your list.
• Select sites – Choose the websites that the user can manage in the Hub.
• Select user role – The scope of access is determined by the role assigned to Hub users when they are created. Choose a default role or create and assign a custom role, as discussed in the Roles section of this guide.
• Notes – Add any notes or extra information related to the user here.

Select Sites

After entering the intended user’s email address, click the Select sites dropdown menu to choose which sites this user can manage in the Hub.

Select All websites to grant Hub access to all sites connected to the current Hub account, or select individual sites to limit access to a specific site(s). If you wish to create a user with customized access privileges, see the Roles section below for guidance on creating custom roles.

Select user role

Hub 2.0 users have two default roles available, plus any custom role(s) you may have already created. You also have the option to create a new custom user role right from this interface:

• View and Edit – All – User can access and modify every Hub feature for the selected sites.
• View Only – All – User can view every Hub screen for the selected sites but cannot modify any settings.
• Create Custom User Role – User access can be as narrowly or as broadly defined as necessary using custom roles. See the Create a custom role section for guidance on creating a custom user role.

Once the user has been identified by email address, site access determined and a user role assigned, click the Invite button to send the confirmation email. The user Name and Notes are optional.

New user accounts are not active until invited users click the Confirm button contained in the invitation email.

Clicking the Confirm button will open a new tab in their browser and direct users to one of two screens, depending on whether or not they are a current WPMU DEV member.

Current Members

A current WPMU DEV member who confirms a Hub user invite will be directed to a WPMU DEV login screen and prompted to log in with an existing username and password. Once logged in, the new account will be added to the existing account, and the member can move from one account to the other as necessary.

To switch between a member account and a Hub user account, click the WPMU DEV profile picture in the righthand corner and then select Switch Account.

Non-member users

Users who are not current WPMU DEV members will be directed to our Free Account setup screen and prompted to create a free account. Once the free account is created, the user will have access to both the user account and their own Hub account.

Free Account Policy

Hub 2.0 Users have access to a Hub account of their own, independent of their user accounts. The free account will remain free as long as the user does not wish to add sites to their own Hub.

If a user does add a site to their own Hub on any of the standalone hosting plans or as a paid member on any membership plan, they will have full access to their own site(s) in their own Hub, and will continue to have the same management access to your sites as you have granted them in your team.

It’s important to note however that if you wish to transfer one of your sites to such a user, for example if they should have access to support for that site, the site would need to be first disconnected from your account before it can be connected to theirs.

To create a custom Hub user role, click the Roles tab under Users & Roles and then click the + Create New Role button.

Enter a name for this custom role in the field provided. Remember, once created, this user role will be available to assign to various users, so name the role accordingly.

The Customize Access list covers every feature of the Hub. Use the toggle buttons to enable or disable access to specific features. You can also provide access to all current and future sites by clicking the toggle for Access to all sites.

Users that have Access to all sites enabled on their custom role will have an i icon next to their names, to indicate that they have this custom permission enabled for them.

Note: If a user has the Access to all sites feature enabled, the owner will not be able to remove their access to a singular site without first disabling the Access to all sites feature in their custom role.

The drop-down menu next to the toggles facilitates still further refinement within the enabled areas.

• View and Edit – All – User can view and modify the settings in this area.
• View Only – All – User can view the data and settings in this area but cannot modify them. This limitation only applies to the area associated with the current toggle.
• Custom – User has access to an area but is limited to certain tasks or actions within that area.

Custom

The Custom option allows you to give or restrict Hub access on a task-by-task basis.

Select Custom to open a modal that displays a menu of tasks associated with that area. Click a task to enable or disable it.

In this way, different roles can access multiple areas, but the allowed tasks within those areas can vary from user to user. For example, it may be beneficial for one team member to only have access to view backups information, while it may make sense to allow more senior team members the ability to also create backups.

A brief description of each task is available in the Task Descriptions section of this guide.

This section offers brief descriptions of the tasks which can enabled or disabled within the Customize Access section.

Sites

• Add/connect new site – Allows a user to create new sites or connect existing sites to the member’s Hub.

Plugins

• View plugin information – See the status of all plugins installed on an authorized site(s).
• Install new plugin – Install new plugins to any authorized site(s).
• Uninstall plugin – Uninstall any plugin from any authorized site(s).
• Update plugin – Update plugins on any authorized site.
• Activate plugin – Activate plugins on any authorized site.
• Deactivate plugin – Deactivate plugins on any authorized site.

Themes

• View theme information – View information for any installed theme.
• Install new theme – Install a new theme to any authorized site.
• Uninstall theme – Uninstall themes from any authorized site.
• Update theme – Update themes on any authorized site.
• Activate theme – Active installed themes on any authorized site.
• Deactivate – Deactivate themes on any authorized site.

WP Core

• View WP Core information – View information about the WordPress installation for any authorized site.
• Update WP Core – Update the core files of any authorized site.

Security

• View site security information – Provide View-only access to Defender configuration settings and report data for any authorized site.
• Run new security scan – Initiate a Defender scan of any authorized site.
• Enable blocklist monitoring – Enable the blocklist feature in Defender for any authorized site.
• Disable blocklist monitoring – Disable the blocklist feature in Defender for any authorized site.

Performance

• View performance information – View performance data collected by Hummingbird.
• Run new performance scan – Initiate a Hummingbird performance scan.
• Ignore performance warning – Select the Ignore option for any Hummingbird performance alert.
• Remove Hummingbird cache(s) – Delete Hummingbird cache
• Activate performance submodules(s) – Activate individual Hummingbird submodules.
• Deactivate performance submodules(s) – Deactivate individual Hummingbird submodules.
• Update performance test report settings – Configure the settings for Hummingbird performance scans.
• Update Uptime report settings – Modify the Uptime report settings.

SEO

• View SEO information – Provide View-only access to Smartcrawl configuration settings and report data for any authorized site.
• Run new SEO Crawl – Initiate a new Smartcrawl.
• Run new SEO Checkup – Initiate a new Smartcrawl checkup

Backups

• View backups information – View the current backups and their associated data.
• Create new backup – Create a new backup of any authorized site.
• Update managed backup settings – Modify the managed backup settings for any authorized site.
• Reset Snapshot Key – Reset the Snapshot API key.
• Delete managed backup item – Delete backups from the managed backup list.

Uptime

• View Uptime Monitor information – Provide View-only access to Uptime configuration settings and report data for any authorized site.
• Update Uptime Monitor settings – Modify Uptime Monitor settings.

Analytics

• View Analytics information – View the analytics data compiled by the built-in WPMU DEV analytics.
• Update Analytics Settings – Update the Analytics data generated by the built-in WPMU DEV analytics.

Automate

• View Automate information – View the current settings and data associated with Automate.
• Update Automate settings – Update Automate

Hosting

• View Hub hosting information – View the hosting information for all authorized hosted sites.
• Add new domain to hosting site – Add a new domain name to the member’s hosted sites.
• Remove a domain from hosting site – Remove a domain from the member’s hosted sites.
• Set a domain as primary for hosting site – Change the public-facing, primary site for any group of associated and connected domains.
• Check DNS status – Test the DNS status for any connected and authorized site.
• Check CNS and SSL status – Re-check the CNS/SSL status for any connected and authorized site.
• Add SFTP/SSH Account – Create SFTP/SSH users for FTP and wp-cli connections
• Remove SFTP/SSH Account – Delete SFTP/SSH users.
• Update SFTP/SSH Account – Modify SFTP/SSH user accounts.
• Update Password Protection settings – Update the password protection feature for any authorized site.
• Update WAF settings – Modify the firewall settings for any authorized site.
• Update Multisite settings – Modify the multisite settings for any multisite network.
• Update PHP settings – Modify the PHP settings governing any authorized site.
• Flush Object Cache – Flush any authorized site’s object cache.
• Reset WP Config – Reset the WordPress configuration file.
• Remove Pending Migration – Delete any in-progress migration in the WPMU DEV migration tool.
• Start Migration – Initiate a new migration using the WPMU DEV migration tool.
• Create new backup – Create a new backup of any authorized site using any active backup feature.
• Restore backup – Restore any authorized site from backup.
• Update backup comment – Modify the comment section associated with each backup.
• Request Download Backup – Download a copy of a backup to a local machine.
• View backups(s) – See the list of backups.
• Delete staging environment – Delete the staging environment for any authorized site.
• Push staging to production – Overwrite the production site with the current staging site.
• Sync staging to production – Modify the staging site to mirror the production site.
• Update staging PHP settings – Update the PHP settings for any authorized staging site.
• Update staging Password Protection settings – Modify the username and password for any authorized staging site.
• View logs – View the logs for any authorized site.
• Add email forward – Configure a forwarding email for emails account connected to an authorized site.
• Remove email forward – Delete an email forwarding configuration.
• Resend email verification – Use the Resend email verification feature.
• Send test email from email forward – Send test email to confirm a new forwarding email address.
• Check DNS email forward – Verify the DNS settings for a forwarded email configuration.
• Export logs – View the log displaying the export activity for any authorized site.
• View available hosting plans – View the available WPMU DEV hosting plans while logged into the Hub.
• Modify hosting plan – Modify the member’s hosting plan for any authorized site.
• Create new hosting site – Create a new hosted site on the member’s account.
• Create hosting site with migration – Migrate a site to a member’s hosting account.
• Create hosting site with clone – Clone a hosted site.
• Manage hosting database – Manage the database for any authorized site.
• Manage hosting staging database – Manage the database for any staging site.
• Add hosting email account – Create a hosted email account.
• Delete hosting email account – Delete a hosted email account.
• Update hosting email account – Modify the configuration of any hosted email account for any authorized site.
• Test hosting email account – Test the configuration of a hosted email account.

Reports

• View Site Report(s) configuration – View reports generated using the WPMU DEV hosting Reports tool.
• Delete Site Report configuration – Delete a WPMU DEV Report.
• Create new Site Report configuration – Configure a new hosting report.
• Edit Site Report configuration – Change the settings for any existing report.
• View Report Histories – View the histories of any scheduled reports.
• Download Report history – Download the reports history for authorized sites.
• Send latest history to email – Email the most recent history.

Notifications

• View notifications – View the notifications generated for any authorized site.
• Mark all notifications as read – Mark all notifications read for all users.