Roles: Who Can Do What

Goal: Add a colleague with the right role and the right sites.
Time: 3 minutes
You need: Super admin access

1. Select System → Users. Filter by Role or Status to find someone.
2. Select Add User.
3. Fill in Name, Email, Password, and Confirm Password.
4. Choose the Role: Super admin, Site admin, or Editor.
5. Tick the sites this person works on, leave Active account on, and select Create.

• Editor — content on their assigned sites: pages, blocks, media, navigation.
• Site admin — everything an editor reaches, plus site-level settings for their sites.
• Super admin — the whole installation: sites, users, system settings, updates, backups.

Site access is separate from the role. An editor assigned to one site cannot see another site's pages at all, which is what makes a multisite installation safe to share.

• Give the smallest role that does the job. Most people who "need admin" need Site admin, and most who need Site admin are editors who hit one blocked screen.
• A sidebar with fewer items is the role working. Before raising someone's role, check which single screen they actually needed.
• Publishing rights come with the role. If someone should write but not publish, Editor plus a review step is the arrangement.
• Deactivating beats deleting when someone leaves. Their name stays readable in revision history instead of becoming a mystery.
• Passwords are set here at creation. Nobody else should ever need to know one — that is what the reset flow is for.