14. Users & Roles
The Hub 2.0 Users & Roles feature allows WPMU DEV account holders to give multiple users controlled access to the Hub, including users who are not WPMU DEV members.
The level of Hub access you grant to additional users can include as few or as many Hub features as you wish. But it’s important to note this access is restricted to Hub features only; it does not grant users access to your WPMU DEV account, or any of the other features of your account (like live-chat support). For more about that, see Confirming Users below.
If you’re not a WPMU DEV member, visit Your All-In-OneWordPress Platform to learn the benefits of membership and to sign up for a free trial.
14.1 OverviewCopy chapter anchor to clipboard
Hub 2.0 users can be configured to access as much or as little of the Hub as needed. Hub 2.0 users do not have access to the wp-admin area, or backend, of connected websites via their Hub user credentials.
The Hub user feature allows WPMU DEV account holders to provide access to the Hub for users who do not necessarily require access to the admin side of websites, an account manager or client, for example. At the same time, wp-admin users who are also Hub users have a powerful set of additional tools at their disposal.
The Users feature can be accessed, and Hub users created, from Hub 2.0 only. Once created, Hub users can navigate between the classic Hub and Hub 2.0 if they wish.
Before creating users, it’s helpful to understand the various ways access is granted and controlled.
- By Site – Users can be granted access to the Hub area for as many or as few sites as desired.
- By Area – Users can be granted access to some Hub areas and restricted from others.
- By Task – Users can be granted authority to perform some tasks in those areas to which they have access but restricted from performing other tasks.
- View only – Users can be granted permission to view Hub screens but restricted from changing any settings on those screens.
Users with access to all areas and tasks for all connected sites can be configured very quickly, as can users with view-only permissions. Users with limited access or control require more time to configure and may involve creating a custom user role, as explained in the Users and Roles sections below.
The Users & Roles screens can be accessed by clicking the menu tab at the top of any Hub 2.0 screen.
The Users & Roles area consists of four primary screens:
- Users – Create, modify, or remove users.
- Roles – Create, modify, and remove custom user roles.
- Sites – Create users on a site-by-site basis.
- Settings – Customize the name and logo included in the confirmation email sent to newly-created users.
The Documentation link opens this usage guide.
The features of each screen are discussed in the sections below.
14.2 UsersCopy chapter anchor to clipboard
The Users screen lists created users with options for granting and changing permissions. If you haven’t created a user yet, we recommend reading the Creating Users section of this guide before proceeding.
The Users list includes:
- Name – The username given to a role when it was created and the avatar, if one exists, for the account connected to it. Click the column title to reorder the list in alphabetical or reverse alphabetical order.
- Email – The email address of the connected account.
- Role – The role assigned to that user.
- Sites – The number of sites a user can access. Hover over the number to see a list of those sites. Click the column title to reorder the list based on the number of sites.
- Status – Active indicates a user has confirmed the email invitation and connected to the user role. Pending indicates the email invitation has not yet been confirmed.
- Delete – The trashcan icon allows you to delete a user. Deleting a user does not delete the role associated with it. New users can be created and given the same role.
14.2.1 Managing Existing UsersLink to chapter 2
To modify an existing user, click anywhere within the row for that user to open the Manage access to sites modal. You can edit the Name of the user as well as add any Notes. The sites that this user can access will be listed, with checkmarks indicating sites the user can access, and plus (+) signs indicating sites to which the user does not have access but can be added.
Choose Access All Sites and the user will be able to access all sites connected to the user’s Hub. Note that this only applies to current sites. If you want the user to have access to all current sites as well as all future sites, please add the Access to all sites capability to the user’s role. You can find more information on the Access to all sites capability here.
To provide access to only some of these sites, choose Access to Selected Sites and then click the plus (+) sign next to the sites for which access is desired.
Click the “View & Edit All” dropdown to see the available role options for this user. The dropdown menu will display the default roles View & Edit-All and View Only-All and any custom roles that have been created. Simply click the desired role to assign it to the current user.
You can also remove the user by clicking Delete user.
After making changes, scroll to the bottom of the modal and click the Update button to save your changes or click Cancel to close without saving.
14.2.2 Creating UsersLink to chapter 2
If you haven’t created a Hub user, click the Add first User button to open the user creation modal. Subsequent users can be created using the New user button.
Configuring a new Hub user involves:
- Email Address – Users are invited to accept Hub access in a confirmation email and must confirm the invite before access is granted. Each user must be invited individually, although multiple users can be assigned the same user role.
- Name – Give your user a name to help distinguish it from others in your list.
- Select sites – Choose the websites that the user can manage in the Hub.
- Select user role – The scope of access is determined by the role assigned to Hub users when they are created. Choose a default role or create and assign a custom role, as discussed in the Roles section of this guide.
- Notes – Add any notes or extra information related to the user here.
WPMU DEV members are authorized up to 10 free email accounts that can be configured in minutes to display the member’s domain in the email address. See our Email Hosting product page for details.
After entering the intended user’s email address, click the Select sites dropdown menu to choose which sites this user can manage in the Hub.
Select All websites to grant Hub access to all sites connected to the current Hub account, or select individual sites to limit access to a specific site(s). If you wish to create a user with customized access privileges, see the Roles section below for guidance on creating custom roles.
Select user role
Hub 2.0 users have two default roles available, plus any custom role(s) you may have already created. You also have the option to create a new custom user role right from this interface:
- View and Edit – All – User can access and modify every Hub feature for the selected sites.
- View Only – All – User can view every Hub screen for the selected sites but cannot modify any settings.
- Create Custom User Role – User access can be as narrowly or as broadly defined as necessary using custom roles. See the Create a custom role section for guidance on creating a custom user role.
Once the user has been identified by email address, site access determined and a user role assigned, click the Invite button to send the confirmation email. The user Name and Notes are optional.
14.2.3 Confirming UsersLink to chapter 2
New user accounts are not active until invited users click the Confirm button contained in the invitation email.
Clicking the Confirm button will open a new tab in their browser and direct users to one of two screens, depending on whether or not they are a current WPMU DEV member.
A current WPMU DEV member who confirms a Hub user invite will be directed to a WPMU DEV login screen and prompted to log in with an existing username and password. Once logged in, the new account will be added to the existing account, and the member can move from one account to the other as necessary.
To switch between a member account and a Hub user account, click the WPMU DEV profile picture in the righthand corner and then select Switch Account.
Users who are not current WPMU DEV members will be directed to our Free Account setup screen and prompted to create a free account. Once the free account is created, the user will have access to both the user account and their own Hub account.
Free Account Policy
Hub 2.0 Users have access to a Hub account of their own, independent of their user accounts. The free account will remain free as long as the user does not wish to add sites to their own Hub.
If a user does add a site to their own Hub on any of the standalone hosting plans or as a paid member on any membership plan, they will have full access to their own site(s) in their own Hub, and will continue to have the same management access to your sites as you have granted them in your team.
It’s important to note however that if you wish to transfer one of your sites to such a user, for example if they should have access to support for that site, the site would need to be first disconnected from your account before it can be connected to theirs.
14.3 RolesCopy chapter anchor to clipboard
There are two default roles available in The Hub 2.0 Roles tab, plus the option to create custom user roles:
- View & Edit – All – User can access and modify every Hub feature for the selected sites.
- View Only – All – User can view every Hub screen for the selected sites but cannot modify any settings.
- Create custom user role – User access can be as narrowly or as broadly defined as necessary using custom roles. See the Create a custom role section for guidance on creating a custom user role. Once created, new custom roles will appear in the drop-down menu along with the default options and can be assigned to other users without having to re-create the access parameters.
Click View & Edit – All to give the user unrestricted access to all sites connected to a given Hub. Users with this role can add and delete sites, modify any setting, and perform most of the same actions as the member who owns this Hub.
Click View Only – All to allow a user to view all the Hub screens for every site connected to a given Hub but without the authority to modify anything.
While new users can be given access to extensive features in The Hub, the DNS rights are exclusive to the team owner. This means that the DNS tab in The Hub will not be visible to any other users, regardless of the roles given to them.
Detailed guidance on creating custom roles is covered in the next section.
14.3.1 Create a custom user roleLink to chapter 3
To create a custom Hub user role, click the Roles tab under Users & Roles and then click the + Create New Role button.
Enter a name for this custom role in the field provided. Remember, once created, this user role will be available to assign to various users, so name the role accordingly.
14.3.2 Customize AccessLink to chapter 3
The Customize Access list covers every feature of the Hub. Use the toggle buttons to enable or disable access to specific features. You can also provide access to all current and future sites by clicking the toggle for Access to all sites.
Users that have Access to all sites enabled on their custom role will have an i icon next to their names, to indicate that they have this custom permission enabled for them.
Note: If a user has the Access to all sites feature enabled, the owner will not be able to remove their access to a singular site without first disabling the Access to all sites feature in their custom role.
The drop-down menu next to the toggles facilitates still further refinement within the enabled areas.
- View and Edit – All – User can view and modify the settings in this area.
- View Only – All – User can view the data and settings in this area but cannot modify them. This limitation only applies to the area associated with the current toggle.
- Custom – User has access to an area but is limited to certain tasks or actions within that area.
The Custom option allows you to give or restrict Hub access on a task-by-task basis.
Select Custom to open a modal that displays a menu of tasks associated with that area. Click a task to enable or disable it.
In this way, different roles can access multiple areas, but the allowed tasks within those areas can vary from user to user. For example, it may be beneficial for one team member to only have access to view backups information, while it may make sense to allow more senior team members the ability to also create backups.
A brief description of each task is available in the Task Descriptions section of this guide.
14.3.3 Task DescriptionsLink to chapter 3
This section offers brief descriptions of the tasks which can enabled or disabled within the Customize Access section.
- Add/connect new site – Allows a user to create new sites or connect existing sites to the member’s Hub.
- View plugin information – See the status of all plugins installed on an authorized site(s).
- Install new plugin – Install new plugins to any authorized site(s).
- Uninstall plugin – Uninstall any plugin from any authorized site(s).
- Update plugin – Update plugins on any authorized site.
- Activate plugin – Activate plugins on any authorized site.
- Deactivate plugin – Deactivate plugins on any authorized site.
- View theme information – View information for any installed theme.
- Install new theme – Install a new theme to any authorized site.
- Uninstall theme – Uninstall themes from any authorized site.
- Update theme – Update themes on any authorized site.
- Activate theme – Active installed themes on any authorized site.
- Deactivate – Deactivate themes on any authorized site.
- View WP Core information – View information about the WordPress installation for any authorized site.
- Update WP Core – Update the core files of any authorized site.
- View site security information – Provide View-only access to Defender configuration settings and report data for any authorized site.
- Run new security scan – Initiate a Defender scan of any authorized site.
- Enable blocklist monitoring – Enable the blocklist feature in Defender for any authorized site.
- Disable blocklist monitoring – Disable the blocklist feature in Defender for any authorized site.
- View performance information – View performance data collected by Hummingbird.
- Run new performance scan – Initiate a Hummingbird performance scan.
- Ignore performance warning – Select the Ignore option for any Hummingbird performance alert.
- Remove Hummingbird cache(s) – Delete Hummingbird cache
- Activate performance submodules(s) – Activate individual Hummingbird submodules.
- Deactivate performance submodules(s) – Deactivate individual Hummingbird submodules.
- Update performance test report settings – Configure the settings for Hummingbird performance scans.
- Update Uptime report settings – Modify the Uptime report settings.
- View SEO information – Provide View-only access to Smartcrawl configuration settings and report data for any authorized site.
- Run new SEO Crawl – Initiate a new Smartcrawl.
- Run new SEO Checkup – Initiate a new Smartcrawl checkup
- View backups information – View the current backups and their associated data.
- Create new backup – Create a new backup of any authorized site.
- Update managed backup settings – Modify the managed backup settings for any authorized site.
- Reset Snapshot Key – Reset the Snapshot API key.
- Delete managed backup item – Delete backups from the managed backup list.
- View Uptime Monitor information – Provide View-only access to Uptime configuration settings and report data for any authorized site.
- Update Uptime Monitor settings – Modify Uptime Monitor settings.
- View Analytics information – View the analytics data compiled by the built-in WPMU DEV analytics.
- Update Analytics Settings – Update the Analytics data generated by the built-in WPMU DEV analytics.
- View Automate information – View the current settings and data associated with Automate.
- Update Automate settings – Update Automate
- View Hub hosting information – View the hosting information for all authorized hosted sites.
- Add new domain to hosting site – Add a new domain name to the member’s hosted sites.
- Remove a domain from hosting site – Remove a domain from the member’s hosted sites.
- Set a domain as primary for hosting site – Change the public-facing, primary site for any group of associated and connected domains.
- Check DNS status – Test the DNS status for any connected and authorized site.
- Check CNS and SSL status – Re-check the CNS/SSL status for any connected and authorized site.
- Add SFTP/SSH Account – Create SFTP/SSH users for FTP and wp-cli connections
- Remove SFTP/SSH Account – Delete SFTP/SSH users.
- Update SFTP/SSH Account – Modify SFTP/SSH user accounts.
- Update Password Protection settings – Update the password protection feature for any authorized site.
- Update WAF settings – Modify the firewall settings for any authorized site.
- Update Multisite settings – Modify the multisite settings for any multisite network.
- Update PHP settings – Modify the PHP settings governing any authorized site.
- Flush Object Cache – Flush any authorized site’s object cache.
- Reset WP Config – Reset the WordPress configuration file.
- Remove Pending Migration – Delete any in-progress migration in the WPMU DEV migration tool.
- Start Migration – Initiate a new migration using the WPMU DEV migration tool.
- Create new backup – Create a new backup of any authorized site using any active backup feature.
- Restore backup – Restore any authorized site from backup.
- Update backup comment – Modify the comment section associated with each backup.
- Request Download Backup – Download a copy of a backup to a local machine.
- View backups(s) – See the list of backups.
- Delete staging environment – Delete the staging environment for any authorized site.
- Push staging to production – Overwrite the production site with the current staging site.
- Sync staging to production – Modify the staging site to mirror the production site.
- Update staging PHP settings – Update the PHP settings for any authorized staging site.
- Update staging Password Protection settings – Modify the username and password for any authorized staging site.
- View logs – View the logs for any authorized site.
- Add email forward – Configure a forwarding email for emails account connected to an authorized site.
- Remove email forward – Delete an email forwarding configuration.
- Resend email verification – Use the Resend email verification feature.
- Send test email from email forward – Send test email to confirm a new forwarding email address.
- Check DNS email forward – Verify the DNS settings for a forwarded email configuration.
- Export logs – View the log displaying the export activity for any authorized site.
- View available hosting plans – View the available WPMU DEV hosting plans while logged into the Hub.
- Modify hosting plan – Modify the member’s hosting plan for any authorized site.
- Create new hosting site – Create a new hosted site on the member’s account.
- Create hosting site with migration – Migrate a site to a member’s hosting account.
- Create hosting site with clone – Clone a hosted site.
- Manage hosting database – Manage the database for any authorized site.
- Manage hosting staging database – Manage the database for any staging site.
- Add hosting email account – Create a hosted email account.
- Delete hosting email account – Delete a hosted email account.
- Update hosting email account – Modify the configuration of any hosted email account for any authorized site.
- Test hosting email account – Test the configuration of a hosted email account.
- View Site Report(s) configuration – View reports generated using the WPMU DEV hosting Reports tool.
- Delete Site Report configuration – Delete a WPMU DEV Report.
- Create new Site Report configuration – Configure a new hosting report.
- Edit Site Report configuration – Change the settings for any existing report.
- View Report Histories – View the histories of any scheduled reports.
- Download Report history – Download the reports history for authorized sites.
- Send latest history to email – Email the most recent history.
- View notifications – View the notifications generated for any authorized site.
- Mark all notifications as read – Mark all notifications read for all users.
14.4 SitesCopy chapter anchor to clipboard
The Sites screen is where Hub user access can be customized on a per-site basis.
The Sites screen displays a list of sites connected to the current Hub and the number of Hub users associated with each. Click the plus (+) icon next to any site to open the Manage Access screen for that site, where users can be added or removed.
The Manage Access modal displays a list of both active and pending Hub users associated with the site.
To add a new Hub user, enter an email address into the field provided, select the desired user role from the drop-down menu and then click Invite. The user will receive an email containing a confirmation button that must be clicked to activate the account.
Note that the email icon for users whose status is still pending appear in black. Click that email icon to resend the email invitation to any user whose status is still pending.
Click on the checkmark icon next to a user to remove site access.
Click the Update button to save your changes or click the Cancel button to close the module without saving the changes.
14.5 SettingsCopy chapter anchor to clipboard
The Settings screen is simply where you can manage the brand name and logo that accompanies the new user email invitation.
Enter the desired name in the field provided, and use the Change logo option to add a custom logo. Click Save to update.