Ananta Code Academy
 Continue to Day 27
MODULE 04 · ADVANCED & CAPSTONE

User Roles & Membership

Not everyone who touches your site should be able to do everything on it. Today you'll learn WordPress's built-in roles and how membership plugins extend them for gated content.

Day 26 of 30 Intermediate ~15 min
01 · OVERVIEW

Roles, Capabilities, and Why They Matter

Every WordPress user is assigned a role, and every role is really just a bundle of individual capabilities — the ability to publish a post, install a plugin, edit another user's content, and so on. Roles exist so you can hand someone exactly the access they need, no more.

This matters more as a site grows. A single-author blog barely needs this, but a client site with a writer, an editor, and a store manager absolutely does.

02 · THE FIVE DEFAULT ROLES

What Each Built-In Role Can Do

WordPress ships with five roles out of the box, ranked from most to least access.

ROLE WHAT IT CAN DO
Administrator

Full control — plugins, themes, settings, and every other user's content.
Editor

Publish and manage all posts and pages, including ones written by others.
Author

Write, edit, and publish only their own posts.
Contributor

Write and edit their own posts, but can't publish them without approval.
Subscriber

Log in and manage their own profile — no content access at all.
03 · WHERE ROLES SHOW UP

Assigning a Role to a User

Roles are set the moment a user is added, and can be changed later from the same screen.

users-add-new.txt 
// Users → Add New
Username   // required, cannot be changed later
Email      // used for password resets and notifications
Role       Subscriber // dropdown — pick the lowest role that works
04 · SETTING UP A TEAM

Adding Users the Right Way

  • Go to Users → Add New and enter the person's username and email.
  • Assign the lowest role that still lets them do their job.
  • Let WordPress send the invite email so they set their own password.
  • Review existing users under Users → All Users and correct any that are over-privileged.
  • Remove access for anyone who no longer needs it, rather than leaving stale accounts around.
    • 05 · ROLES VS MEMBERSHIP

    Editorial Roles vs Membership Levels

    USER ROLES Control what someone can do to the site itself — write, publish, moderate, administer.
    MEMBERSHIP LEVELS Control what a visitor can see or access — gated articles, courses, or downloads behind a paywall or login.
    06 · COMMON MISTAKES

    Where Beginners Go Wrong

    CHECK YOUR USER LIST FOR THESE
    EVERYONE IS AN ADMIN Making every teammate an Administrator hands out far more access than they need.
    SHARED LOGINS One shared account for multiple people removes any real accountability for changes.
    STALE ACCOUNTS Former contributors left with active accounts are an easy, forgotten security gap.
    07 · BREAKDOWN

    Breaking Down What You Just Learned

    1

    Roles bundle capabilitiesEach role is just a named set of individual permissions.

    2

    Five roles cover most needsAdministrator, Editor, Author, Contributor, and Subscriber.

    3

    Give the least access neededAssign the lowest role that still lets someone do their job.

    4

    Membership is a separate layerIt gates content for visitors rather than controlling site management.

    5

    Audit users regularlyRemove stale accounts and correct over-privileged ones.

    08 · TRY IT

    Try It Yourself

    EXERCISE

    Create a second user on your capstone site with the Contributor role, log in as that user, and confirm you can draft a post but not publish it.

    09 · TODAY'S PRACTICE

    Audit and Organize Your Users

    HANDS-ON EXERCISE

    Getting your user list into good shape

    By the end of today, every account on your site should have a role that actually matches what that person needs to do.

    1. List every existing user and their current role.
    2. Downgrade any account that has more access than it needs.
    3. Create one test Subscriber account to see the logged-in experience.
    4. Remove or deactivate any account no longer in use.
    5. Document who holds Administrator access and why.
    10 · RECAP

    Recap

    CAPABILITIES

    The individual permissions that make up a role.

    DEFAULT ROLES

    Administrator, Editor, Author, Contributor, Subscriber.

    LEAST ACCESS

    Assign the lowest role that still gets the job done.

    MEMBERSHIP

    A separate layer that gates content for visitors, not staff.

    11 · SUMMARY

    Key Takeaways

    • Every WordPress user has a role, and every role is a bundle of individual capabilities.
    • The five default roles range from full-access Administrator down to content-free Subscriber.
    • Always assign the lowest role that lets someone actually do their job.
    • Membership plugins add a separate layer that gates content for visitors, distinct from staff roles.
    • Audit your user list regularly to remove stale accounts and fix over-privileged ones.
    Course Overview