How to Change a User Role

To change a user role in WordPress, go to Users → All Users, find the user you want to edit, click their username or the Edit link, scroll down to the Role dropdown, select the new role (Administrator, Editor, Author, Contributor, or Subscriber), and click Update User. For bulk changes, select multiple users with checkboxes, choose “Change role to…” from the Bulk Actions dropdown, and click Change.

Changing user roles is essential for managing team access, improving security, and ensuring users have the right permissions for their responsibilities. WordPress makes it easy to upgrade, downgrade, or customize user roles through the dashboard, plugins, or command-line tools.

This 2026 guide shows you exactly how to change a WordPress user role using multiple methods—single user, bulk changes, plugins, WP-CLI, and database—plus best practices for security and role management.

Last updated: September 2026

Why You Need to Change WordPress User Roles

User roles control what people can and cannot do on your WordPress site. Changing roles lets you:

  • Promote contributors to authors when they’re ready to publish

  • Downgrade administrators to editors for better security

  • Give temporary access to freelancers or contractors

  • Adjust permissions as team responsibilities evolve

  • Remove excessive privileges from former employees

Understanding when and how to change roles is critical for maintaining a secure, well-organized WordPress site.

Understanding WordPress User Roles

WordPress includes six default roles, each with specific capabilities. Before changing a role, understand what each one allows.

Administrator

Capabilities: Full control over the site—manage users, install plugins/themes, change settings, create/edit/delete all content.

Use for: Site owners, lead developers, trusted technical managers.

Security note: Limit Administrator accounts to 2–3 people maximum.

Editor

Capabilities: Publish, edit, and delete any post or page (including others’), manage categories/tags/comments, moderate all comments. Cannot install plugins or change site settings.

Use for: Senior content managers, head writers, editorial supervisors.

Author

Capabilities: Write, edit, publish, and delete their own posts; upload files to Media Library. Cannot edit others’ content or access site settings.

Use for: Regular blog contributors, staff writers, guest authors who publish independently.

Contributor

Capabilities: Write and edit their own drafts; submit posts for review. Cannot publish or upload files.

Use for: Guest writers, first-time contributors, users whose content requires editorial approval.

Subscriber

Capabilities: Manage their own profile (change password, update email), view their own comments. Cannot write posts or access admin features.

Use for: Registered users who need minimal access (e.g., for comments or memberships).

Super Admin (Multisite Only)

Capabilities: Manage every site in a WordPress Multisite network, install/activate plugins network-wide, create/delete subsites.

Use for: Network administrators managing multiple WordPress sites.

Explore my post: WordPress user roles explained

Method 1: Change a Single User Role via Dashboard (Easiest)

This is the standard method for changing one user’s role.

Step 1: Log Into WordPress Dashboard

Visit yoursite.com/wp-admin and log in with an Administrator account. Only Administrators (or Super Admins in multisite) can change user roles.

Step 2: Navigate to Users → All Users

In the left sidebar:

  1. Hover over Users.

  2. Click All Users.

Step 3: Find the User to Edit

Scroll through the user list or use the search box to find the user whose role you want to change.

Step 4: Click Edit

Hover over the username and click the Edit link that appears below it. Alternatively, click directly on the username.

Step 5: Scroll to the Role Section

On the user profile page, scroll down until you find the Role dropdown menu.

Step 6: Select the New Role

Click the dropdown and choose the appropriate role:

  • Administrator (full control)

  • Editor (manage all content)

  • Author (publish own posts)

  • Contributor (submit drafts)

  • Subscriber (minimal access)

Step 7: Click Update User

Scroll to the bottom of the page and click the Update User button.

The user’s role is now changed immediately. They’ll retain access to the site with their new permission level.

Method 2: Change Multiple User Roles at Once (Bulk Action)

For managing larger teams, WordPress allows bulk role changes to save time.

Step 1: Go to Users → All Users

Navigate to the Users list in your dashboard.

Step 2: Select Users with Checkboxes

Check the boxes next to the usernames you want to update. You can select as many users as needed.

Step 3: Choose Bulk Action

At the top of the user table:

  1. Find the Bulk Actions dropdown.

  2. Select Change role to…

  3. Choose the new role from the submenu (Administrator, Editor, Author, Contributor, or Subscriber).

Step 4: Click Change

Click the Change button next to the dropdown.

All selected users now have the new role applied instantly.

Pro tip: Use bulk actions when onboarding a team, restructuring permissions, or downgrading multiple accounts after a security audit.

Method 3: Change User Roles with a Plugin

Plugins like User Role Editor, Members, or Capability Manager Enhanced extend role management with custom roles, advanced permissions, and granular control.

Example: Using User Role Editor

  1. Install and activate the User Role Editor plugin.

  2. Go to Users → User Role Editor in your dashboard.

  3. Select the role you want to edit from the dropdown.

  4. Check or uncheck individual capabilities to customize the role.

  5. Click Update to save changes.

Example: Using Members Plugin

  1. Install and activate the Members plugin.

  2. Go to Members → User Roles.

  3. Click Edit on the role you want to modify.

  4. Grant or deny specific permissions by content type.

  5. Click Update Role to save.

You can learn more HERE

Method 4: Change User Roles via WP-CLI (Advanced)

For developers or agencies managing multiple sites, WP-CLI allows fast, scriptable role changes without loading the dashboard.

Prerequisites

  • SSH access to your server

  • WP-CLI installed on your host

Command to Change a User’s Role

bash

wp user set-role johndoe editor

Replace:

  • johndoe with the username

  • editor with the desired role (administrator, editor, author, contributor, subscriber)

Examples

Set as Administrator:

bash

wp user set-role johndoe administrator

Using User ID:

bash

wp user set-role 5 editor

Bulk Change All Subscribers to Authors:

bash

wp user list --role=subscriber --field=ID | xargs -I % wp user set-role % author

Verify the Change

List users to confirm:

bash

wp user list --fields=ID,user_login,roles

Method 5: Change User Roles via phpMyAdmin (Database Method)

For advanced users who need to change roles directly in the database (e.g., when locked out of wp-admin).

Warning

This method is risky—incorrect database edits can break your site. Always back up first.

Step 1: Access phpMyAdmin

Log into cPanel → Databases → phpMyAdmin. Select your WordPress database.

Step 2: Find the User ID

Open the wp_users table and locate the user. Note their ID (e.g., 42).

Step 3: Open wp_usermeta Table

Click on the wp_usermeta table (adjust prefix if needed).

Step 4: Find Capability Rows

Look for rows where:

  • user_id matches the user’s ID

  • meta_key is wp_capabilities and wp_user_level

Step 5: Edit wp_capabilities

Click Edit on the wp_capabilities row. Replace the meta_value with:

For Administrator:

text

a:1:{s:13:"administrator";b:1;}

For Editor:

text

a:1:{s:6:"editor";b:1;}

For Author:

text

a:1:{s:6:"author";b:1;}

For Contributor:

text

a:1:{s:11:"contributor";b:1;}

For Subscriber:

text

a:1:{s:10:"subscriber";b:1;}

Click Go to save.

Step 6: Edit wp_user_level

Click Edit on the wp_user_level row. Set meta_value to:

  • Administrator: 10

  • Editor: 7

  • Author: 2

  • Contributor: 1

  • Subscriber: 0

Click Go to save.

The user’s role is now changed in the database.

Special Case: WooCommerce Shop Manager and Customer Roles

If you run a WooCommerce store, you’ll see two additional roles:

Shop Manager

Capabilities: Manage orders, products, coupons, customers, and WooCommerce reports. Cannot install plugins or change site-wide settings.

Use for: Store staff who handle daily operations without needing full Administrator access.

Customer

Capabilities: View order history, manage account details, place orders. Similar to Subscriber but with e-commerce features.

Use for: Shoppers who create accounts during checkout.

When to Change WordPress User Roles

Promote Contributors to Authors

When a guest writer or junior contributor consistently produces quality content and can be trusted to publish independently.

Downgrade Administrators to Editors

For security hardening—reduce the number of people with full site control. Ideal after team restructuring or security audits.

Upgrade Editors to Administrators

When a content manager needs to install plugins, manage users, or configure site settings.

Change Authors to Contributors

When a writer’s content requires editorial review before publishing (e.g., compliance, legal, or brand guidelines).

Demote Former Employees to Subscribers

Before removing access entirely, downgrade former team members to prevent accidental or malicious changes while you arrange offboarding.

Best Practices for Changing WordPress User Roles

Apply Least Privilege

Always give users the minimum role required for their tasks. Start low (Contributor or Author) and upgrade only if necessary.

Document Role Changes

Keep a simple record of:

  • Who had which role

  • When it was changed

  • Why the change was made

  • Who approved it

Review Roles Quarterly

Schedule quarterly audits to:

  • Remove inactive accounts

  • Downgrade overprivileged users

  • Verify 2FA is enabled on privileged accounts

Use Individual Accounts

Never share a single login among multiple people. Individual accounts enable accountability, audit trails, and secure offboarding.

Enable Two-Factor Authentication (2FA)

For Administrators and Editors, require 2FA using plugins like Wordfence, WP 2FA, or your host’s security tools.

See WordPress Role Security Checklist article as well.

Common Mistakes to Avoid

Giving Too Many Users Administrator Access

Every additional Administrator multiplies your attack surface. Limit to 2–3 trusted people.

Changing Roles Without Communication

Always inform users when their role changes, especially if it reduces their access. Explain the security or workflow reasons.

Not Testing After Role Changes

After changing a role, test that the user can still perform their required tasks. Adjust if necessary.

Ignoring Plugin-Specific Roles

Some plugins (membership, LMS, e-commerce) add custom roles. Review these when auditing user access.

Forgetting to Remove Former Team Members

When someone leaves your team, immediately remove or downgrade their account. Lingering access is a common security gap.

Troubleshooting: Why Can’t I Change a User Role?

Missing Role Dropdown

Cause: You’re not logged in as an Administrator, or the user is a Super Admin in multisite.

Fix: Log in with an Administrator account or contact the network Super Admin.

“You do not have permission to edit this user”

Cause: Your role lacks the edit_users or promote_users capability.

Fix: Ask an Administrator to change the role or upgrade your permissions.

Role Change Not Taking Effect

Cause: Caching issue or plugin conflict.

Fix: Clear browser and site cache, deactivate conflicting plugins temporarily, or try changing the role via WP-CLI.

User Loses Access After Role Change

Cause: Downgraded from Administrator to a lower role without verifying their required permissions.

Fix: Review the user’s responsibilities and adjust their role accordingly, or grant specific capabilities via a plugin like User Role Editor.

How to Create Custom User Roles

If default roles don’t fit your needs, create custom roles with specific capabilities.

Using User Role Editor Plugin

  1. Install and activate User Role Editor.

  2. Go to Users → User Role Editor.

  3. Click Add Role.

  4. Name the role (e.g., “Content Manager”).

  5. Select capabilities to grant or deny.

  6. Click Add to create the role.

  7. Assign the custom role to users via Users → All Users → Edit → Role dropdown.

Using Code (functions.php)

Add to your theme’s functions.php or a custom plugin:

php

function add_custom_role() {
add_role(
'content_manager',
'Content Manager',
array(
'read' => true,
'edit_posts' => true,
'edit_others_posts' => true,
'publish_posts' => true,
'upload_files' => true,
'moderate_comments' => true,
'manage_categories' => true,
'edit_theme_options' => false,
'install_plugins' => false,
'edit_users' => false,
)
);
}
add_action('init', 'add_custom_role');

Frequently Asked Questions

Can I change my own user role?

No. WordPress prevents users from changing their own role to avoid accidental privilege escalation. Ask another Administrator to change it for you.

Can I change a Super Admin’s role?

No. Super Admins in multisite cannot be downgraded via the dashboard. This requires direct database editing or WP-CLI.

How do I change multiple users to the same role?

Use the Bulk Actions method: select users with checkboxes, choose “Change role to…” from the dropdown, select the role, and click Change.

Can I change a user role without logging into WordPress?

Yes. Use WP-CLI (wp user set-role) or phpMyAdmin to change roles directly in the database.

What happens to a user’s content when I change their role?

Their existing posts, pages, and media remain intact. Role changes only affect future permissions, not past content.

Can I revert a role change?

Yes. Simply follow the same steps to change the role back to its previous setting.

Why is the role dropdown missing for some users?

In multisite, Super Admins cannot be edited via the standard interface. Also, some plugins may hide the dropdown for specific users.

How do I change a user role on WordPress.com?

Go to Users → All Users, click the user’s name, select the new role from the dropdown, and click Save. Note: WordPress.com has some role restrictions based on your plan.

Discover more from WORDPRESS ROLE

Subscribe to get the latest posts sent to your email.

Related Posts

Discover more from WORDPRESS ROLE

Subscribe now to keep reading and get access to the full archive.

Continue reading