01
Access mismatch
A writer only needs to prepare drafts.
→
Better fit · Contributor
Can write and edit drafts, but can’t publish posts. Administrator access would be broader than this task needs.
Five default roles match different publishing and site-management responsibilities. Choose the narrowest role that lets someone complete their work.
default WordPress roles
Problem → better fit
A role is a preset group of capabilities: actions an account is allowed to perform.
Access mismatch
A writer only needs to prepare drafts.
Better fit · Contributor
Can write and edit drafts, but can’t publish posts. Administrator access would be broader than this task needs.
Access mismatch
Someone needs to publish their own articles, not manage other users’ posts.
Better fit · Author
Can write, edit, and publish their own posts. Can’t manage other users’ posts or site settings.
Access mismatch
An editorial lead must manage content from multiple users and comments.
Better fit · Editor
Can publish and manage posts and pages, including other users’ content, and can manage comments. Can’t install a theme.
Access mismatch
A person needs to manage site settings, users, plugins, or themes.
Better fit · Administrator
Has broad site-management capabilities, including managing settings, users, plugins, themes, and site content. Reserve this role for people who need those controls.
Access mismatch
An account needs profile access, but no content-creation or site-management access.
Better fit · Subscriber
Can manage their own profile, without content-creation or site-management access.
How access works
For example, edit_posts allows post editing, while moderate_comments permits comment moderation. Missing capabilities can mean a user won’t see the related screen or controls.
Keep assignments aligned
Check the role in Users > All Users. Test the account’s usual workflow, and review access when responsibilities change. Plugins may customize capabilities or add roles.