¿Quieres entender mejor los perfiles y permisos de los usuarios de WordPress?
WordPress tiene un sistema de gestión de perfiles de usuario que define lo que un usuario puede y no puede hacer en su sitio web. Conocer estos perfiles y permisos de usuario es esencial a medida que su sitio WordPress crece.
En esta guía, profundizaremos en los perfiles y permisos de los usuarios de WordPress para que pueda gestionar mejor su sitio.
¿Qué son los perfiles y permisos de usuario de WordPress?
Utilizar correctamente los perfiles y permisos de usuario de WordPress le proporciona un control total sobre su sitio web y puede ayudarle a mejorar la seguridad de su sitio web.
WordPress te permite añadir varios usuarios a tu sitio web. También puede abrir el registro de usuarios en su sitio web para que otros usuarios puedan acceder.
Cuando añada un nuevo usuario a su sitio web, puede elegir un perfil para él. También puede establecer un perfil de usuario por defecto para su sitio, que se asignará automáticamente a los nuevos usuarios que accedan a una cuenta.
Un perfil de usuario incluye capacidades o permisos específicos que definen las acciones que un usuario puede realizar en su sitio web.
Hay cinco perfiles de usuario disponibles por defecto en WordPress:
- Administrador
- Editor
- Autor
- Colaborador
- Suscriptor
Puede ver una comparación visual completa entre cada perfil de usuario consultando la infografía siguiente:
Alternativamente, puede leer el resumen de cada perfil de usuario y sus capacidades y permisos a continuación.
1. Perfil de administrador
En un sitio web normal de WordPress, el perfil de administrador es el perfil de usuario más potente. Los usuarios con el perfil de administrador pueden añadir nuevas entradas, editar entradas de cualquier usuario y borrar esas entradas.
Además, pueden instalar, editar y borrar plugins y temas.
Y lo que es más importante, los usuarios administradores pueden añadir y borrar usuarios y cambiar la información acerca de los usuarios existentes, incluidas sus contraseñas.
Este perfil está básicamente reservado para los propietarios de sitios y le da el control total de su blog de WordPress. Si gestionas un sitio WordPress multiusuario, debes tener mucho cuidado con el perfil de usuario administrador que asignas.
2. Perfil del editor
Los usuarios con el perfil de editor en WordPress tienen control total sobre las secciones de contenido de su sitio web.
Pueden añadir, editar, publicar y borrar cualquier entrada del sitio, incluidas las escritas por otros. Un editor también puede moderar, editar y borrar comentarios.
Los editores no pueden cambiar los ajustes de tu sitio, instalar plugins y temas, ni añadir nuevos usuarios.
3. Perfil del autor
Los usuarios con el perfil de autor pueden escribir, editar y publicar sus propias entradas. También pueden borrar sus propias entradas, aunque ya estén publicadas.
Al escribir entradas, los autores no pueden crear nuevas categorías, pero pueden elegir entre las existentes. También pueden añadir etiquetas a sus entradas.
Los autores pueden ver los comentarios, incluso los que están pendientes de reseña / valoración, pero no pueden moderar, aprobar o borrar ningún comentario.
No tienen acceso a los ajustes del sitio, plugins o temas, por lo que es un perfil de usuario de riesgo relativamente bajo. La sola excepción es la capacidad de borrar sus propias entradas publicadas.
4. Perfil del colaborador
Los usuarios con el perfil de colaborador pueden añadir nuevas entradas y editar sus propias entradas, pero no pueden publicar ninguna entrada.
Al escribir entradas, pueden elegir entre las categorías existentes y crear sus propias etiquetas.
La mayor desventaja del perfil de colaborador es que no pueden subir archivos, por lo que no pueden añadir imágenes a sus entradas.
Los colaboradores también pueden ver todos los comentarios del sitio web, pero no pueden aprobar ni borrar comentarios.
Por último, no tienen acceso a los ajustes del sitio web, plugins o temas, por lo que no pueden cambiar ningún ajuste de su sitio.
5. Perfil del suscriptor
Los usuarios con el perfil de suscriptor pueden acceder a su sitio WordPress, actualizar sus perfiles de usuario y cambiar sus contraseñas.
No pueden escribir entradas, ver comentarios o hacer cualquier otra cosa dentro de su área de administrador de WordPress.
Este perfil de usuario es especialmente útil si tiene un sitio de membresía, una tienda en línea u otro sitio en el que los usuarios pueden registrarse y acceder.
Si desea crear una experiencia de acceso personalizada para sus visitantes, consulte nuestra guía sobre cómo añadir una página de inicio de sesión y widgets en WordPress.
Bonificación: perfil de superadministrador
Este perfil de usuario solo está disponible en una red multisitio de WordPress.
Los usuarios con el perfil de superadministrador pueden añadir y borrar sitios en una red multisitio. También pueden instalar plugins y temas, añadir usuarios y realizar acciones en toda la red en una configuración multisitio de WordPress.
Es como tener acceso de administrador a todos los sitios de la red.
Cómo personalizar los perfiles y permisos de los usuarios existentes en WordPress
Los perfiles de usuario por defecto de WordPress tienen capacidades que funcionarán para la mayoría de los sitios web y blogs de WordPress.
Por ejemplo, si gestiona el sitio web de una revista, el perfil “Editor” puede asignarse al personal directivo, el perfil “Autor” a los autores noveles y el perfil “Colaborador” a los escritores invitados.
Pero a veces, es posible que desee personalizar los permisos y capacidades asignados al perfil para las necesidades específicas de su sitio web.
Como el perfil de autor por defecto que permite a los usuarios publicar sus entradas y también les da la posibilidad de borrar sus entradas publicadas. En este caso, es posible que desee quitar la capacidad que permite a los autores borrar sus entradas.
Hay algunos plugins que añaden perfiles específicos a tu sitio web, como el plugin de rol de usuario moderador de comentarios.
Pero si desea personalizar los perfiles de usuario de WordPress, la forma más sencilla es utilizar el plugin Members. Te permite crear, gestionar y cambiar los perfiles de los usuarios de tu sitio web.
Lo primero que tienes que hacer es activar e instalar el plugin. Para más detalles, consulte nuestra guía paso a paso sobre cómo instalar un plugin de WordPress.
Una vez activado, tendrá un nuevo elemento / artículo llamado “Miembros” en su panel de administrador de WordPress.
Debe ir a Miembros ” Roles y hacer clic en el perfil de usuario que desea editar.
En este ejemplo, editaremos el perfil “Autor”, pero puede elegir el perfil que mejor se adapte a sus necesidades.
Esto le lleva a una pantalla en la que puede personalizar completamente las capacidades de ese perfil.
Para quitar una capacidad del perfil, simplemente marque la casilla “Denegar”. Si desea añadir una nueva capacidad, marque la casilla “Conceder”.
Aquí, marcaremos la casilla ‘Denegar’ para la capacidad de usuario de borrar entradas.
Si no marcas / compruebas una casilla para un perfil disponible, ese usuario no tendrá esa capacidad.
Cuando haya terminado de personalizar su perfil, haga clic en el botón “Actualizar”.
Los cambios que realice se aplicarán automáticamente a todos los usuarios existentes con ese perfil y a todos los nuevos usuarios a los que se asigne el perfil.
Cómo crear perfiles de usuario personalizados en WordPress
Otra cosa que puedes hacer es crear perfiles de usuario completamente personalizados en WordPress con perfiles únicos de capacidades.
Para ello, debe utilizar el mismo plugin que el anterior.
Simplemente vaya a Miembros ” Añadir nuevo perfil y asigne un nombre a su nuevo perfil.
Por ejemplo, puede crear un perfil de desarrollador que puede asignar a un desarrollador de WordPress con permisos específicos.
La columna de la izquierda tiene diferentes secciones con anuncios / catálogos / fichas de las capacidades disponibles. Seleccionaremos la pestaña “Apariencia” y añadiremos capacidades para editar, instalar y actualizar temas.
A continuación, haga clic en el botón “Añadir perfil” para guardar el perfil del usuario.
A continuación, puede crear un nuevo usuario y asignarle el nuevo perfil de usuario.
Para ello, vaya a Usuarios ” Añadir nuevo y rellene los datos de su nuevo usuario.
En la parte inferior de la pantalla, verá la sección “Perfiles de usuario”.
Simplemente marque las casillas correspondientes a los perfiles de usuario que desee asignar al nuevo usuario y, a continuación, haga clic en el botón “Añadir nuevo usuario”.
Ahora, ha creado un nuevo perfil de usuario personalizado de WordPress y lo ha asignado a un nuevo usuario.
Para más detalles, consulte nuestra guía sobre cómo añadir nuevos usuarios y autores a WordPress.
Si desea crear un perfil de usuario de WordPress solo para moderar comentarios, consulte nuestra guía sobre cómo permitir a los usuarios del blog moderar comentarios en WordPress.
Esperamos que este artículo le haya ayudado a entender los perfiles y permisos de los usuarios. También puede consultar nuestra guía sobre cómo registrar un nombre de dominio y nuestra selección de expertos sobre el mejor alojamiento gratuito de sitios web.
If you liked this article, then please subscribe to our YouTube Channel for WordPress video tutorials. You can also find us on Twitter and Facebook.
Syed Balkhi says
Hey WPBeginner readers,
Did you know you can win exciting prizes by commenting on WPBeginner?
Every month, our top blog commenters will win HUGE rewards, including premium WordPress plugin licenses and cash prizes.
You can get more details about the contest from here.
Start sharing your thoughts below to stand a chance to win!
Mrteesurez says
This is a detail article that nailed out all what user roles entail and give best practices to assign each to specific users.
My question:
By default, Does a contributor role can see an admin bar ?
I know of athour role.
WPBeginner Support says
Unless you disable it for the user role, all user roles would see the admin bar when logged in.
Administrador
Jiří Vaněk says
I need to add a user to the website who will only have specific rights to what he can do on the website and what he must not have access to. Thank you for the instructions on how to create exactly such a user in WordPress. It saved me a lot of time looking for instructions on how to achieve this.
Muhammad Afzal Qureshi says
Very nice explain in detail, I have a great experience after reading out.
WPBeginner Support says
Glad you found our article helpful!
Administrador
Waqar says
Your blog is really awesome, especially when ever I need to learn something about WordPress in deep dive.
WPBeginner Support says
Glad you find our content helpful!
Administrador
Jen says
Hi WPB, how many “admin” roles can a website have? On my site, the original admin has full rights. But new admin usernames don’t. Is that normal?
WPBeginner Support says
You can have as many admin users as you like on a WordPress site, if you do not have the default admin privileges then either a plugin may have modified the privileges as the most common reason.
Administrador
Sam says
Hi – I’m wondering if I can set a default for subscribers that doesn’t allow them access to the dashboard. I have subscribers through a free online course. I want to automatically eliminate the dashboard access so I don’t have to manually uncheck the box “Show Toolbar when viewing site ” Is there a way to do that?
WPBeginner Support says
If you only want to hide the admin bar then we have a guide below that for hiding it:
wpbeginner.com/wp-tutorials/how-to-disable-wordpress-admin-bar-for-all-users-except-administrators
We also have a guide for redirecting users after they log into your site below that can help achieve what you’re looking for:
https://www.wpbeginner.com/plugins/how-to-redirect-users-after-successful-login-in-wordpress/
Administrador
Tammy says
What role is suggested if you want someone to be able to view/download the analytics of a woocommerce site but not be able to change and/or update the content of the site otherwise? Do the basic roles cover that or is that a custom role?
WPBeginner Support says
You would likely need to create a custom role for that functionality
Administrador
LDB says
Why do all articles on user permissions for WordPress never talk about what can be done with ‘pages’?. Seems like such a glaring omission from these articles. Am I missing something? Why do no articles not give info about permission related to building and editing pages?
WPBeginner Support says
If you take a look at the infographic we cover which roles can modify pages
Administrador
Traci says
I am building a website in wordpress for a company. They want a dedicated page for sales or specials but they want to be the one’s handling updating that page each week. Can I give them permission only to post pictures and write add information for the sale items?
WPBeginner Support says
It sounds like you would want to set them as the author role and set them as the author of that page.
Administrador
Harish says
Is there any limitation for user roles count?
WPBeginner Support says
No, but you would want to ensure you are not adding roles for every user normally as multiple users can use the same role.
Administrador
Maame says
Hi,
Is it possible to customize the role of a shop manager? I would like to make some features accessible to them
WPBeginner Support says
Yes, we cover the default roles in this guide but more roles can be added or modified
Administrador
DannyO says
Great writeup. Very close to what I was searching for.
Mine is a bit different,
I have a custom made plugin which I want to assign someone to manage the role. He needs to be entering data on a daily basis in dashboard of this custom plugin. But under the Type-Specific Capabilities, I dont see the name of this plugin. How can I achieve this then, when I cant see the custom plugin name?
WPBeginner Support says
You would want to reach out to the plugin’s creator for what permissions are required to be able to use your plugin.
Administrador
Katherine says
Hi! I work for a site and I’m was assigned Editor. But for some reason, I can’t delete drafts, published articles, or media from Gallery that aren’t mine. The Trash/Delete option just isn’t anywhere on-screen. Is there anything I can do?
WPBeginner Support says
You would want to reach out to the admin of the site to ensure there haven’t been any changes to the permissions for your role.
Administrador
luka sheklashvili says
Hi,
We have a website where is possible to buy food
We have customers and also we have accountant
which premmision will be best for accountant to do his/her work
we are using woocomerce platforme of ecomerce
WPBeginner Support says
You would want to take a look at the default WooCommerce roles added and you can add or modify the role depending on the access you want to give.
Administrador
Kshitij Gajam says
Hi,
Thanks for the great article! it is neatly structured and presented.
I would like to know is it possible to restrict access up to 3 blogs for users who dont subscribe to the website. Only after subscribing they get full access. If yes, how can I do it? Is there a plug in or I have to code?
WPBeginner Support says
For what you’re looking for, you would want to take a look at membership plugins below and you would need to reach out to the support for what you’re wanting to use for if they have that available.
https://www.wpbeginner.com/plugins/5-best-wordpress-membership-plugins-compared/
Administrador
Felicia Kay says
I have recently started a new job with a local law firm and we have purchased a form building tool for our WordPress site. My role permissions have been set to Editor, am I able to access it as an editor to build the new form(s) we need?
WPBeginner Support says
It would depend on the specific plugin. If you reach out to the plugin’s support they should let you know what permissions are needed for using the plugin
Administrador
lynda says
I have been a WordPress user for many years and decided several months ago to combine two blogs. At that time I added the user name of the other blog as a user on my primary blog. Now that second user appears as the author of posts. It appears as the writer of replies to comments. How do I change this?
WPBeginner Support says
If you do not want your additional user to be on the site you can delete that user and attribute all of their content to your a different user
Administrador
Maude says
Hi, do you know if there is a way to create a user who will have access to everything, but can edit nothing. I want to show someone how my website is built so we can talk about it, but I want to be sure he can’t mess anything up.
WPBeginner Support says
That would heavily depend on your site and the plugins you are using, you may want to send screenshots or share screens for what you are wanting.
Administrador
Jerusha says
Hi, I have just started my blog. And installed a new theme. My site is not even live yet … it still had the ‘coming soon” page, however today I discovered I have 308 subscribers under the ‘user’s title on my dashboard… how is that possible?
WPBeginner Support says
Your site may be allowing user registration, for more on that you would want to take a look at our article here:
https://www.wpbeginner.com/beginners-guide/how-to-allow-user-registration-on-your-wordpress-site/
Administrador
Imran says
And what if a disgruntled author goes to “edit” her post and then removes all the content and then click on “update” button.
This would be a rare case but possible even if you disallow her to “delete published” posts.
WPBeginner Support says
If you are concerned about that, you could disable the ability to edit published posts
Administrador
Segun Wonda says
Hello, thank you for this great article.
I have a question please.
After modifying my author role to stop author from deleting their own post with this plugin, will the modification still be active when I disable or delete the plugin?
WPBeginner Support says
Yes, your changes should still be active when you remove the plugin.
Administrador
sam thandi says
i was searching for one of your articles in which you showed how to create user like Editorial Staff can you please give me link to that article. thanks
WPBeginner Support says
It would depend on what you mean. If you’re wanting more editorial options you could take a look at our article here: https://www.wpbeginner.com/plugins/how-to-improve-your-editorial-workflow-in-multi-author-wordpress-blogs/
If you wanted to hide the author’s name we have our article here:
https://www.wpbeginner.com/wp-themes/how-to-remove-author-name-from-wordpress-posts/
Administrador
Pablo says
I can see that there are more user categories now, in addition to the 5 mentioned here. Participant, Moderator, Spectator… Cant see the permissions for these! Any ideas where to find them?
WPBeginner Support says
If you have other plugins that add user roles those would likely be why you have the extra roles
Administrador
Infoneter says
Nice and useful information. thanks
WPBeginner Support says
You’re welcome
Administrador
Kirk Bullen says
Great post.. And great site. It’s my ‘Go To’ site, for everything I need, and have learnt so much.
What I want to do, is create a Movie Mod User. So that they can Add Movies/Shows. But I don’t want to give all Admin permissions. They would only require to use the Plugin used to add these Movies/Shows. All it.would require them to do, is use the Import Movie/Show. Then once added, have the ability to edit the Movie/Show. So that they can add the Movie/Show Collection/Genre.
Is there a plugin available that you know of, that gives permissions to use selected Plugin Admin abilities? I have tried Editor User. But it doesnt show the ‘Import’ option.
Any advise is greatly appreciated.
WPBeginner Support says
It would depend on what you are using to import the movies, if it is a plugin you should be able to reach out to the plugin’s support for what permission is required to import the movie/show.
Administrador
Steveo says
Users >> Capabilities does not exist. Got another idea?
WPBeginner Support says
You may want to ensure that the plugin was activated successfully on your site.
Administrador
sultan haider says
I have school chains in multiple cities and i want to each school have
their login and password and add students in own schools records and
admin have access all schools records.
Its possible with wordpress or not.
WPBeginner Support says
It is possible but you would likely need to have a custom plugin created to do something that specific.
Administrador
Tony says
Suggest you use multisite capability, each school can have their own subdomain.
Emzee says
How to check what permissions I have as a user on wordpress site please? Sorry am a beginner?
WPBeginner Support says
Hi Emzee,
Using the capability manage enhanced you can see what permissions a user has on your site.
Administrador
shubhangi says
Great post now i can ad more author without confusion thanks friend
Mithilesh Yadav says
How to send notification mail by Guest User in WordPress
Marianne says
Good day!
Thanks for the explanation. I was wondering is there also a date stamp when the user has registered?
regards,
Kagan says
i am using wholesale plugin. we want open manuel order from order woocommerce dashboard
But when i add product wholesale prices are not shown. is it possible to make this wtih user roles plugins. if so which one should we use
thank you
chintan says
Hi i want make a two type of login page first is customer and second is Service provider (like a amazon seller).
service provider uplode it’s services , and it can edit it’s services.
how i do that?
beth says
Hi. I created some new users but they have yet to receive their email notification. How long does it take for that to be generated?
LaVonne Carlson says
Is it possible to setup a user with permission to edit only a particular page? I’m running a website for a Boy Scout troop, and I want the boys to be able to upload and rearrange photos on the gallery page, but not make any other changes to the site.
Gulfam says
I’ve also problem related to your question, want to allow user only on specific plugin and page to post things.
Fahad Rafiq says
How can we remove underscore from users name in wordpress users tab?
Like if name entered is First Second, it will appears as First_Second.
Any fix.?
John says
Whenever my writers try to past an iframe into their stories it vanishes when saving. From a little bit of testing this occurs up to Editor level which also gives publishing ability — which I don’t want them to have.
I’ve got both adminimize and user role editor installed. Staff writers have a custom user role editor setting of Staff Writers.
How can I overcome this limitation on inserting iframes?
Thank you
WPBeginner Support says
Hey John,
The capability to add iframes is part of unfiltered_html capability. However, allowing user roles the ability to add unfiltered html is too risky and not recommended. You should look for other ways to manage this. For example, if this iframe embed is from a third party service provider, they they might already have a WordPress plugin.
Administrador
John says
Thank you. Ordinarily I would agree. But these are inhouse writers who need this capability. The most common is Facebook video embeds getting the iframe from Embedded Video & Live Video Player.
We also embed YouTube and other video in the body of the stories often and this explains why the html table that has been prepared for them to use by simply replacing the URL doesn’t work.
The rest of what the different level of access – editor, copy editor, photo editor, contributor, and staff writer can see and access is regulated using adminimize and user role editor.
What is the risk of giving unfiltered html access to inhouse staff?
Thank you
WPBeginner Support says
Hey John,
With unfiltered html capability, users will have the ability to add malicious code which could get executed as soon as the post content is saved.
John says
Ok. Thank you. That won’t be an issue in this instance. But very useful to know.
Akhil says
Is it possible to delete a post by another author.?
WPBeginner Support says
Hey Akhil,
If you are an administrator or editor on that site, then yes you can delete posts created by another author.
Administrador
Jake says
I am not getting a lot of “email subscribers” via the subscribe widget to my blog but I do receive a lot of “New user registration” notifications from WP of people that are set up as their user role as “subscribers” and so my WP admin has a list of these people and their email addresses.
As far as I can tell, when I create a new post, no one with the user role “Subscriber” is being notified. Why else does WP give me their email address if not to notify them? Perhaps I am doing something wrong? How do I notify the hundreds and hundreds of people in this list?
WPBeginner Support says
Hi Jake,
Please see our guide on how to add email subscriptions to your WordPress blog.
Administrador
Imtiaz Ahmed says
hi, I have many Editors on my website, how I can strict, I mean editors are not able to edit Admin post. I want this on my website
Regards:
Imtiaz Ahmed
WPBeginner Support says
Hey Imtiaz,
The editor user role gives users permission to edit any posts. You should change their user role to author or contributor. You can also edit permissions of a user role or create new user roles using plugins.
Administrador
Gary Wicks says
I have a question if I have 300 subscribers what does that mean? Does it mean people subscribed to make a comment? I have no idea where these came from as I only have a few actual comments posted. Does this mean they were all spammers that Akismet software rejected? So the comments did not show but they are all in my users list as subscribers to make comments?
Or is this rss feed or what is it?
Steve Root says
The role attribute selection on my theme has both an Allow and a Deny column. If a particular attribute is only enabled when checked what is the purpose of the Deny column (twenty-sixteen)?
deppak says
Hi there,
Great post!
I created a custom role cloning the “administrator”, is it possible for administrators to change between the two? I can see the administrator can change all others’ role, but can it change its own through the back-end dashboard/menu?
Thanks!
Anne Cohen says
Hi. Thank you for the post! Very helpful, but one more question….
Can Contributor writers DELETE their articles when they’re published?
What about when they’re pending?
Let’s say they had a change of heart? I just noticed a contributor alter an article that I was already editing/pending. I didn’t think that was possible.
Abhiney says
Hi,
I am facing issues with the user creation. I am looking to create an editor for my website but despite deactivating all plugins, changing passwords etc,for the new user – when I try to login in through the ‘New User’ credentials it says – “Sorry, you are not allowed to access this page.”
Can you please help.
Debbie N. says
Can I give permission to use a backup plugin but not other plugins? I see you can add more capabilities but I can’t figure out how to set it up for that. Thanks for any help.
Obed Aikins says
Hi, nice post, very useful. i’m a college student developing a site for publishing hostels information and also book into it using wordpress. i want to create custom agent/landlord roles in WP. please help
Stuart says
Users with the subscriber user role can login to your WordPress site and update their user profiles. They can change their passwords if they want to. They cannot write posts, view comments, or do anything else inside your WordPress admin area.
This user role is particularly useful if you require users to login before they can read a post or leave a comment.
I don’t understand this. So if a subscriber is logged in can they or can’t they comment on a post?
WPBeginner Support says
Yes they can comment on a post.
Administrador
Alan Jordan says
This was really helpful. Thank you.
Jez Butler says
Great descriptions – thanks! Is there any way to set an Administrator role for individual sites on a multisite install? TIA, Jez