14. Users & Roles
The Hub 2.0 Users & Roles feature allows WPMU DEV account holders to give multiple users controlled access to the Hub, including users who are not WPMU DEV members.
The level of Hub access you grant to additional users can include as few or as many Hub features as you wish.
Note that the access you grant is restricted to Hub features only. It does not grant users access to your WPMU DEV account, or any of the other features of your account (like live-chat support).
If you’re not a WPMU DEV member, visit Your All-In-OneWordPress Platform to learn the benefits of membership and to sign up for a free trial.
14.1 Overview
Copy chapter anchor to clipboardHub 2.0 users can be configured to access as much or as little of the Hub as needed. Hub 2.0 users do not have access to the wp-admin area, or backend, of connected websites via their Hub user credentials.
The Hub user feature allows WPMU DEV account holders to provide access to the Hub for users who do not necessarily require access to the admin side of websites, an account manager or client, for example. At the same time, wp-admin users who are also Hub users have a powerful set of additional tools at their disposal.
The Users feature can be accessed, and Hub users created, from Hub 2.0 only. Once created, Hub users can navigate between the classic Hub and Hub 2.0 if they wish.
Defining Access
Before creating users, it’s helpful to understand the various ways access is granted and controlled.
- By Site – Users can be granted access to the Hub area for as many or as few sites as desired.
- By Area – Users can be granted access to some Hub areas and restricted from others.
- By Task – Users can be granted authority to perform some tasks in those areas to which they have access but restricted from performing other tasks.
- View only – Users can be granted permission to view Hub screens but restricted from changing any settings on those screens.
Users with access to all areas and tasks for all connected sites can be configured very quickly, as can users with view-only permissions. Users with limited access or control require more time to configure and may involve creating a custom user role, as explained in the Users and Roles sections below.
Location
The Users & Roles screens can be accessed by clicking the menu tab at the top of any Hub 2.0 screen.
The Users & Roles area consists of four primary screens:
- Users – Create, modify, or remove users.
- Roles – Create, modify, and remove custom user roles.
- Sites – Create users on a site-by-site basis.
- Settings – Customize the name and logo included in the confirmation email sent to newly-created users.
The Documentation link opens this usage guide.
The features of each screen are discussed in the sections below.
14.2 Users
Copy chapter anchor to clipboardThe Users screen lists created users with options for granting and changing permissions. If you haven’t created a user yet, we recommend reading the Creating Users section of this guide before proceeding.
The Users list includes:
- Name – The username given to a role when it was created and the avatar, if one exists, for the account connected to it. Click the column title to reorder the list in alphabetical or reverse alphabetical order.
- Email – The email address of the connected account.
- Role – The role assigned to that user.
- Sites – The number of sites a user can access. Hover over the number to see a list of those sites. Click the column title to reorder the list based on the number of sites.
- Status – Active indicates a user has confirmed the email invitation and connected to the user role. Pending indicates the email invitation has not yet been confirmed.
- Delete – The trashcan icon allows you to delete a user. Deleting a user does not delete the role associated with it. New users can be created and given the same role.
14.2.1 Managing Existing Users
Link to chapter 2To modify an existing user, click anywhere within the row for that user to open the Manage access to sites modal. You can edit the Name of the user as well as add any Notes. The sites that this user can access will be listed, with checkmarks indicating sites the user can access, and plus (+) signs indicating sites to which the user does not have access but can be added.
Choose Access All Sites and the user will be able to access all sites connected to the user’s Hub. Note that this only applies to current sites. If you want the user to have access to all current sites as well as all future sites, please add the Access to all sites capability to the user’s role. You can find more information on the Access to all sites capability here.
To provide access to only some of these sites, choose Access to Selected Sites and then click the plus (+) sign next to the sites for which access is desired.
Click the “View & Edit All” dropdown to see the available role options for this user. The dropdown menu will display the default roles View & Edit-All and View Only-All and any custom roles that have been created. Simply click the desired role to assign it to the current user.
You can also remove the user by clicking Delete user.
After making changes, scroll to the bottom of the modal and click the Update button to save your changes or click Cancel to close without saving.
14.2.2 Creating Users
Link to chapter 2If you haven’t created a Hub user, click the Add first User button to open the user creation modal. Subsequent users can be created using the New user button.
Configuring a new Hub user involves:
- Email Address – Users are invited to accept Hub access in a confirmation email and must confirm the invite before access is granted. Each user must be invited individually, although multiple users can be assigned the same user role.
- Name – Give your user a name to help distinguish it from others in your list.
- Select sites – Choose the websites that the user can manage in the Hub.
- Select user role – The scope of access is determined by the role assigned to Hub users when they are created. Choose a default role or create and assign a custom role, as discussed in the Roles section of this guide.
- Notes – Add any notes or extra information related to the user here.
WPMU DEV members are authorized up to 10 free email accounts that can be configured in minutes to display the member’s domain in the email address. See our Email Hosting product page for details.
Select Sites
After entering the intended user’s email address, click the Select sites dropdown menu to choose which sites this user can manage in the Hub.
Select All websites to grant Hub access to all sites connected to the current Hub account, or select individual sites to limit access to a specific site(s). If you wish to create a user with customized access privileges, see the Roles section below for guidance on creating custom roles.
Select user role
Hub 2.0 users have two default roles available, plus any custom role(s) you may have already created. You also have the option to create a new custom user role right from this interface:
- View and Edit – All – User can access and modify every Hub feature for the selected sites.
- View Only – All – User can view every Hub screen for the selected sites but cannot modify any settings.
- Create Custom User Role – User access can be as narrowly or as broadly defined as necessary using custom roles. See the Create a custom role section for guidance on creating a custom user role.
Once the user has been identified by email address, site access determined and a user role assigned, click the Invite button to send the confirmation email. The user Name and Notes are optional.
14.2.3 Confirming Users
Link to chapter 2New user accounts are not active until invited users click the Confirm button contained in the invitation email.
Clicking the Confirm button will open a new tab in their browser and direct users to one of two screens, depending on whether or not they are a current WPMU DEV member.
Current Members
A current WPMU DEV member who confirms a Hub user invite will be directed to a WPMU DEV login screen and prompted to log in with an existing username and password. Once logged in, the new account will be added to the existing account, and the member can move from one account to the other as necessary.
To switch between a member account and a Hub user account, click the WPMU DEV profile picture in the righthand corner and then select Switch Account.
Non-member users
Users who are not current WPMU DEV members will be directed to our Free Account setup screen and prompted to create a free account. Once the free account is created, the user will have access to both the user account and their own Hub account.
Free Account Policy
Hub 2.0 Users have access to a Hub account of their own, independent of their user accounts. The free account will remain free as long as the user does not wish to add sites to their own Hub.
If a user does add a site to their own Hub on any of the standalone hosting plans or as a paid member on any membership plan, they will have full access to their own site(s) in their own Hub, and will continue to have the same management access to your sites as you have granted them in your team.
It’s important to note however that if you wish to transfer one of your sites to such a user, for example if they should have access to support for that site, the site would need to be first disconnected from your account before it can be connected to theirs.
14.3 Roles
Copy chapter anchor to clipboardThere are two default roles available in The Hub 2.0 Roles tab, plus the option to create custom user roles:
- View & Edit – All – User can access and modify every Hub feature for the selected sites.
- View Only – All – User can view every Hub screen for the selected sites but cannot modify any settings.
- Create custom user role – User access can be as narrowly or as broadly defined as necessary using custom roles. See the Create a custom role section for guidance on creating a custom user role. Once created, new custom roles will appear in the drop-down menu along with the default options and can be assigned to other users without having to re-create the access parameters.
Click View & Edit – All to give the user unrestricted access to all sites connected to a given Hub. Users with this role can add and delete sites, modify any setting, and perform most of the same actions as the member who owns this Hub.
Click View Only – All to allow a user to view all the Hub screens for every site connected to a given Hub but without the authority to modify anything.
Detailed guidance on creating custom roles is covered in the next section.
14.3.1 Create a Custom User Role
Link to chapter 3To create a custom Hub user role, click the Roles tab under Users & Roles and then click the + Create New Role button.
Enter a name for this custom role in the field provided. Remember, once created, this user role will be available to assign to various users, so name the role accordingly.
14.3.2 Customize Access
Link to chapter 3The Customize Access list covers every feature of the Hub. Use the toggle buttons to enable or disable access to specific features. You can also provide access to all current and future sites by clicking the toggle for Access to all sites.
Users that have Access to all sites enabled on their custom role will have an i icon next to their names, to indicate that they have this custom permission enabled for them.
Note: If a user has the Access to all sites feature enabled, the owner will not be able to remove their access to a singular site without first disabling the Access to all sites feature in their custom role.
The drop-down menu next to the toggles facilitates still further refinement within the enabled areas.
- View and Edit – All – User can view and modify the settings in this area.
- View Only – All – User can view the data and settings in this area but cannot modify them. This limitation only applies to the area associated with the current toggle.
- Custom – User has access to an area but is limited to certain tasks or actions within that area.
14.4 Advanced Role Customization
Copy chapter anchor to clipboardCustom user roles can be granted access to specific features of each Hub 2.0 module.
To customize user access to individual module features, select Custom from the dropdown menu beside the name of the intended module.
Then, select individual module features from the list to grant access for the custom user role.
The features listed for each module are described below.
14.4.1 Sites Module
Link to chapter 4Add/Connect New Site
Allows the user to connect an externally hosted site to Hub 2.0.
Update Site Info
Allows the user to modify site settings, such as site name and thumbnail.
SSO Login
Allows the user to access a site’s wp-admin by secure one-click login, or Single Sign-On (SSO). If disabled, the user will need to enter their credentials in order to login to a site’s wp-admin.
Enabling SSO Login will allow the user to access a site’s wp-admin with your credentials.
14.4.2 Plugins Module
Link to chapter 4View Plugin Information
Allows the user to view the name, version, and status of all plugins installed on a site.
Install New Plugin
Allows the user to install new plugins on a site.
Uninstall Plugin
Allows the user to uninstall plugins on a site.
Update Plugin
Allows the user to update plugins on a site.
Activate Plugin
Allows the user to activate plugins on a site.
Deactivate Plugin
Allows the user to deactivate plugins on a site.
Ignore/Unignore Updates
Allows the user to ignore or unignore updates to plugins on a site.
14.4.3 Themes Module
Link to chapter 4View Theme Information
Allows the user to view the name, version, and status of all themes installed on a site.
Install New Theme
Allows the user to install new themes on a site.
Uninstall Theme
Allows the user to uninstall themes on a site.
Update Theme
Allows the user to update themes on a site.
Activate Theme
Allows the user to activate themes on a site.
Deactivate Theme
Allows the user to deactivate themes on a site.
For WordPress single site installations, activating a theme will automatically deactivate the current theme, even if the user does not have access to the Deactivate Theme feature.
Ignore/Unignore Updates
Allows the user to ignore or unignore updates to themes on a site.
14.4.4 WP Core Module
Link to chapter 4View WP Core Information
Allows the user to view information about the WordPress installation on a site.
Update WP Core
Allows the user to update core WordPress files on a site.
Ignore/Unignore Updates
Allows the user to ignore or unignore updates to core WordPress files on a site.
14.4.5 Security Module
Link to chapter 4View Site Security Information
Allows the user to access a site’s Security module, which displays security information generated by Defender including configuration details, security recommendations, and logs.
Run New Security Scan
Allows the user to run a Defender security scan on a site.
Enable Blocklist Monitoring
Allows the user to activate blocklist monitoring for a site.
Disable Blocklist Monitoring
Allows the user to deactivate blocklist monitoring for a site.
Save Existing Config
Allows the user to save the current security settings for a site.
Apply Config
Allows the user to apply saved security settings to a site.
14.4.6 Performance Module
Link to chapter 4View Performance Information
Allows the user to access a site’s Performance module, which displays performance information generated by Hummingbird including configuration details and statistics.
Run New Performance Scans
Allows the user to run a Hummingbird performance scan on a site.
Ignore Performance Warning
Allows the user to ignore Hummingbird performance scan warnings.
Remove Hummingbird Cache(s)
Allows the user to clear content cached by Hummingbird for a site.
Activate Performance Submodule(s)
Allows the user to activate additional Hummingbird features, such as response time monitoring and asset optimization.
14.4.7 SEO Module
Link to chapter 4View SEO Information
Allows the user to access a site’s SEO module, which displays SEO information generated by Smartcrawl including configuration details and report data.
Run New SEO Crawl
Allows the user to run a Site Crawler scan on a site.
Run New SEO Checkup
Allows the user to run a Smartcrawl SEO checkup on a site.
14.4.8 Backups Module
Link to chapter 4View Backups Information
Allows the user to access a site’s Backups module, which displays site backup information including configuration details and backup history.
Create New Backup
Allows the user to create a backup of a site.
Update Managed Backup Settings
Allows the user to view and modify a site’s backup settings.
Reset Snapshot Key
Allows the user to reset the Snapshot API key.
Delete Managed Backup Item
Allows the user to delete an existing backup of a site.
14.4.9 Uptime Module
Link to chapter 4View Uptime Monitor Information
Allows the user to access a site’s Uptime module, which displays site status and availability statistics.
Update Uptime Monitor Settings
Allows the user to view and modify Uptime Monitor settings for a site.
Save Existing Config
Allows the user to save the current Uptime Monitor settings for a site.
Apply Config
Allows the user to apply saved Uptime Monitor settings to a site.
14.4.10 Analytics Module
Link to chapter 4View Analytics Information
Allows the user to access a site’s Analytics module, which displays site traffic statistics.
Update Analytics Settings
Allows the user to view and modify analytics settings for a site.
14.4.11 Automate Module
Link to chapter 4View Automate Information
Allows the user to view information about automatic updates to core WordPress files, plugins, and themes installed on a site.
Update Automate Settings
Allows the user to view and modify automatic update settings for a site.
14.4.12 Hosting Module
Link to chapter 4View HUB Hosting Information
Allows the user to access a site’s Hosting module, which displays site hosting information including configuration details, site storage, and much more.
Add New Domain to Hosting Site
Allows the user to add a new domain name to a site.
Remove a Domain from Hosting Site
Allows the user to remove a domain name from a site.
Set a Domain as Primary for Hosting Site
Allows the user to set a domain name as the primary domain for a site.
Check DNS Status
Allows the user to check the DNS status for a site.
Check DNS and SSL Status
Allows the user to check the DNS/SSL status for a site.
Add SFTP/SSH Account
Allows the user to add a new SFTP or SSH user account for a site.
Remove SFTP/SSH Account
Allows the user to remove an existing SFTP or SSH user account from a site.
Update SFTP/SSH Account
Allows the user to update the username or password for an existing SFTP or SSH user account on a site.
Update Password Protection Settings
Allows the user to update password protection settings for a site.
Update WAF Settings
Allows the user to update web application firewall (WAF) settings for a site.
Update Multisite Settings
Allows the user to convert a WordPress single site installation into a multisite network.
Update PHP Settings
Allows the user to change the PHP version for a site.
Flush Object Cache
Allows the user to clear the object cache for a site.
Reset WP Config
Allows the user to reset a site’s wp-config.php file to its default state.
Remove Pending Migration
Allows the user to cancel the in-progress migration of an external site to a hosted site.
Start Migration
Allows the user to initiate the migration of an external site to a hosted site.
Create New Backup
Allows the user to create a backup of a site.
Restore a Backup
Allows the user to restore a backup of a site.
Update Backup Comment
Allows the user to update the comment attached to a backup of a site.
Request Download Backup
Allows the user to request the download of a backup of a site.
View Backup(s)
Allows the user to view the list of backups of a site.
Delete Staging Environment
Allows the user to delete the staging environment of a site.
Push Staging to Production
Allows the user to replace the production data of a site with the contents of that site’s staging environment.
Sync Staging with Production
Allows the user to reset the staging environment of a site to a new copy of that site’s production environment.
Update Staging PHP Settings
Allows the user to change the PHP version for the staging environment of a site.
Update Staging Password Protection Settings
Allows the user to update the username and password required to access the staging environment of a site.
View Logs
Allows the user to view the logs of a site.
Add Email Forward
Allows the user to configure a new email forwarding address for a site.
Remove Email Forward
Allows the user to remove an existing email forwarding address from a site.
Resend Email Verification
Allows the user to resend the verification email required when configuring a new email forwarding address for a site.
Send Test Email from Email Forward
Allows the user to send a test email from an existing email forwarding address for a site.
Check DNS Email Forward
Allows the user to verify that a site’s DNS records are correctly configured for email forwarding.
Export Logs
Allows the user to export and download the logs of a site.
View Available Hosting Plans
Allows the user to view details about the available WPMU DEV hosting plans.
Modify Hosting Plan
Allows the user to change the current WPMU DEV hosting plan for a site.
Create New Hosting Site
Allows the user to create a new hosted site.
Create Hosting Site With Migration
Allows the user to create a new hosted site by migrating from an existing connected site.
Create Hosting Site With Clone
Allows the user to create a new hosted site by cloning from an existing hosted site, or by cloning from a site template.
Manage Hosting Database
Allows the user to manage the database of a site.
Manage Hosting Staging Database
Allows the user to manage the database of a site’s staging environment.
Add Hosting Email Account
Allows the user to configure a new email account for a site.
Delete Hosting Email Account
Allows the user to remove an existing email account from a site.
Update Hosting Email Account
Allows the user to change the password for an email account on a site.
Test Hosting Email Account
Allows the user to send a test email to an email account on a site.
Manage Hosting Files
Allows the user to manage a site’s files via File Manager.
Add New Email Alias
Allows the user to configure a new email alias for a site.
Delete Email Alias
Allows the user to remove an existing email alias from a site.
Update Server Static Cache Settings
Allows the user to update server-side page caching settings for a site.
Purge Server Static Cache
Allows the user to clear the server-side page cache for a site.
Update Bruteforce Attack Protection Settings
Allows the user to update bruteforce attack protection settings for a site.
14.4.13 Reports Module
Link to chapter 4View Site Report(s) Configuration
Allows the user to access a site’s Reports module.
Delete Site Report Configuration
Allows the user to delete an existing report configuration for a site.
Create New Site Report Configuration
Allows the user to create a new report configuration for a site.
Edit Site Report Configuration
Allows the user to modify an existing report configuration for a site.
View Report Histories
Allows the user to view a log of reports previously generated for a site.
Download Report History
Allows the user to download a report previously generated for a site.
Send Latest History to Email
Allows the user to email a report previously generated for a site.
14.4.14 Notifications Module
Link to chapter 4View Notifications
Allows the user to view notifications generated for authorized sites.
Mark All Notifications as Read
Allows notifications read by the user to be marked as read for all users.
14.4.15 DNS Module
Link to chapter 4View Domains
Allows the user to access the DNS manager.
Note that while it is possible to limit users’ access to only some sites in Hub 2.0, there is no way to limit their access to only certain domains in the DNS manager. If you grant a user access to the DNS manager, that user will be able to manage DNS for all domains. Use with caution.
Add New Domain
Allows the user to add a new domain.
Delete Domain
Allows the user to delete an existing domain.
Check NS Setup
Allows the user to recheck the DNS records for a domain.
View Domain DNS Record
Allows the user to view the DNS records for a domain.
Add Domain DNS Record
Allows the user to add a new DNS record for a domain.
Update Domain DNS Record
Allows the user to modify an existing DNS record for a domain.
Delete Domain DNS Record
Allows the user to remove an existing DNS record from a domain.
14.4.16 Miscellaneous
Link to chapter 4View Default Configs
Allows the user to view the default Security and Uptime Monitor settings for a site.
14.5 Sites
Copy chapter anchor to clipboardThe Sites screen is where Hub user access can be customized on a per-site basis.
The Sites screen displays a list of sites connected to the current Hub and the number of Hub users associated with each. Click the plus (+) icon next to any site to open the Manage Access screen for that site, where users can be added or removed.
The Manage Access modal displays a list of both active and pending Hub users associated with the site.
To add a new Hub user, enter an email address into the field provided, select the desired user role from the drop-down menu and then click Invite. The user will receive an email containing a confirmation button that must be clicked to activate the account.
Note that the email icon for users whose status is still pending appear in black. Click that email icon to resend the email invitation to any user whose status is still pending.
Click on the checkmark icon next to a user to remove site access.
Click the Update button to save your changes or click the Cancel button to close the module without saving the changes.
14.6 Settings
Copy chapter anchor to clipboardThe Settings screen allows you to modify your business name and logo. Your business name will be used when inviting new users via email, and your business name and logo will appear for your users in the Hub 2.0 interface.
To update your business name, enter your desired business name in the field provided. To change your logo, click Change logo and upload a new image. Click the Save button to save your changes.
Your business name will appear in the invitation email when inviting a new user to join Hub 2.0.
Your business name will also be displayed for your users in the Hub 2.0 menu bar, and will appear along with your logo in the team switcher.
14.7 Users Support
Copy chapter anchor to clipboardNeed help setting up or managing Users with Hub 2.0? WPMU DEV members have access to 24/7 live support.
