WordPress user access

When a new WordPress environment is created, a user account will automatically be created for an individual nominated by the customer organization. The user account on a single site will have an Administrator role, and the user account on a multisite will have a Super Admin role.

• Users with an Administrator or Super Admin role are responsible for adding, removing, and managing all other users on that site or multisite.
• Two-factor authentication and Jetpack SSO are integrated with all WordPress sites on the VIP Platform. VIP recommends that all WordPress user accounts require one of those added security methods for logging in.

Add a user to a WordPress single site

Users with an Administrator role have the capability to add users to their WordPress site through the WordPress admin dashboard. Users added to a site can be assigned to default WordPress user roles, or customized roles if they exist.

1. In the WordPress admin dashboard, select Users from sidebar menu.
2. Select the Add New button to add a new user to the site.
3. Fill out the form and select the role that the user should be assigned.
4. Check the Send User Notification option in order for the user to receive an email with a password-set link.
   • If this option is not selected, the user will need to access the login URL (example.com/wp-admin) and use the password reset feature to generate a password.
5. Select Add User.

User management on a WordPress multisite

On a WordPress multisite, only a user with a Super Admin role has access to all sites as well as the network settings. User access for all other roles is granted per-site. A user can review the sites for which they have assigned roles by selecting My Sites in the WordPress admin tool bar.

The capability to add new users to sites on a WordPress multisite network can be restricted to only users with a Super Admin role. If the Add new users setting in the My Sites > Network Admin > Settings dashboard is disabled, only a Super Admin can add new users to sites on the network.

This setting—and all network level settings—is only accessible to users with a Super Admin role.

Adding new users to the network

New users can be added to the multisite network by a user with a Super Admin role.

1. In the WordPress admin tool bar, hover over My Sites > Network Admin > Users and select Users.
2. Select the Add New button to add a new user to the network.
3. Add a unique Username for the new user, and enter their Email address.
4. Select Add User, and a password reset link will be sent to the user via email by default.

Once a user has been added to a multisite network, they can be invited to a site on the network by an Administrator of that site.

Adding new users to a site on the network

New users can be added to a site on a multisite network by a user with an Administrator role for that site if:

• The Add new users setting in the My Sites > Network Admin > Settings dashboard is enabled.
• Or, if the new user has already been added to the network by a Super Admin.

To add a new user to a site:

1. Select Users from sidebar menu in the WordPress admin dashboard.
2. Select the Add New button to add a new user to the network.
3. Complete the Add Existing User form if the user has already been added to the network.
   Complete the Add New User form if they are new to the network and the Add new users setting is enabled.
4. Add a unique Username for the new user, and enter their Email address.
5. Select the Add Existing User or Add Existing User button, and a password reset link will be sent to the user via email by default.

Super Admin privileges on a WordPress multisite

Great caution should be taken in granting a user with Super Admin access to the network. Users with a Super Admin role have the ability to make changes to every setting on any site in the network.

Only an existing Super Admin can grant or remove Super Admin privileges for another user.

1. Locate the user in the Users list within the Network Admin
2. Hover over the user to reveal and select the Edit link.
3. Toggle the option labeled “Grant this user super admin privileges for the Network“.
4. Select Update User at the bottom of the page to save the settings.

Removing a user’s Super Admin privileges will not remove their user account on the network. A user without Super Admin privileges will only have access to sites on the network to which they have been added and assigned a user role.

Delete a Super Admin from a WordPress multisite

A user without Super Admin privileges cannot be removed from the network. If a user with a Super Admin role needs to be removed from a network completely, their Super Admin privileges must first be removed. After saving this change, the user can then be removed from the network.

WordPress user management via WP-CLI

WordPress user accounts can also be managed with WP-CLI, using commands such as wp user and wp super-admin.

WP-CLI commands against a VIP Platform WordPress environment must be run in the command line with VIP-CLI.