Title: BBA User Role Manager
Author: amitworx
Published: <strong>June 10, 2026</strong>
Last modified: August 17, 2026

---

Search plugins

![](https://ps.w.org/builtbyamit-user-role-manager/assets/banner-772x250.png?rev
=3635795)

![](https://ps.w.org/builtbyamit-user-role-manager/assets/icon-256x256.png?rev=3635795)

# BBA User Role Manager

 By [amitworx](https://profiles.wordpress.org/amitworx/)

[Download](https://downloads.wordpress.org/plugin/builtbyamit-user-role-manager.1.0.2.zip)

 * [Details](https://vec.wordpress.org/plugins/builtbyamit-user-role-manager/#description)
 * [Reviews](https://vec.wordpress.org/plugins/builtbyamit-user-role-manager/#reviews)
 *  [Installation](https://vec.wordpress.org/plugins/builtbyamit-user-role-manager/#installation)
 * [Development](https://vec.wordpress.org/plugins/builtbyamit-user-role-manager/#developers)

 [Support](https://wordpress.org/support/plugin/builtbyamit-user-role-manager/)

## Description

BBA User Role Manager is a focused WordPress user role manager for administrators
who need to create custom roles without editing code.

New roles begin with the current Subscriber capabilities, providing a safe baseline
that can be expanded through the plugin’s grouped capability editor.

The role directory displays every role registered on the site. Roles created by 
BBA User Role Manager can be managed or deleted, while WordPress core roles and 
roles created by other plugins remain protected and read-only.

#### Key Features

 * **Create Custom Roles:** Add WordPress user roles with unique role keys and readable
   display names.
 * **Safe Starting Permissions:** Initialize new roles with the site’s current Subscriber
   capabilities.
 * **Focused Capability Editor:** Manage selected post, page, media, category, and
   site capabilities.
 * **Complete Role Directory:** Review WordPress core, plugin-managed, and third-
   party roles together.
 * **Protected Core Roles:** Keep Administrator, Editor, Author, Contributor, and
   Subscriber read-only.
 * **Protected Third-Party Roles:** View roles created by other plugins without 
   taking ownership of them.
 * **Safe Role Deletion:** Reassign affected users to Subscriber before deleting
   a managed role.
 * **WordPress-Native Security:** Restrict administrative actions using capabilities,
   nonces, validation, sanitization, and escaping.
 * **Privacy-Friendly:** No telemetry, external services, tracking, or frontend 
   output.
 * **Translation-Ready:** Includes a POT translation template for the published 
   WordPress.org text domain.

#### Available Capability Groups

 * **Posts:** Create or edit own posts, publish posts, edit others’ posts, delete
   own or others’ posts, and read private posts.
 * **Pages:** Create or edit own pages, publish pages, edit others’ pages, and delete
   own or others’ pages.
 * **Media:** Upload files to the WordPress Media Library.
 * **Categories and Tags:** Manage categories and tags.
 * **Site Management:** Edit theme options and manage site settings.

Important: The `manage_options` capability provides access to sensitive WordPress
settings and should only be granted to highly trusted users.

#### Designed for Safe Ownership Boundaries

BBA User Role Manager only edits and deletes roles created through this plugin.

WordPress core roles and roles registered by WooCommerce, membership plugins, themes,
or custom code remain read-only. Source labels for third-party roles are informational
and never establish ownership.

#### Privacy

BBA User Role Manager does not collect analytics, send telemetry, contact external
services, or transmit personal information.

### How to Use

#### Creating a custom role

 1. Open **BBA User Role Manager**.
 2. Find **Add Custom User Role**.
 3. Enter a display name, such as `Event Organizer`.
 4. Enter a unique lowercase role key, such as `event_organizer`.
 5. Select **Add Role**.
 6. Confirm that the role appears under **Managed by this plugin**.

Use permanent, descriptive role keys containing lowercase letters, numbers, and 
underscores. Avoid WordPress core role keys and keys already registered by another
plugin.

#### Managing capabilities

 1. Locate the role under **Managed by this plugin**.
 2. Select **Manage Capabilities**.
 3. Enable only the capabilities required by the role.
 4. Select **Save Capabilities**.
 5. Test the result with a separate non-administrator account.

The basic `read` capability is always preserved so assigned users can sign in.

#### Assigning a role to a user

 1. Open **Users > All Users**.
 2. Edit the intended user.
 3. Select the custom role in the **Role** setting.
 4. Save the user profile.

#### Deleting a custom role

 1. Open **BBA User Role Manager**.
 2. Locate the plugin-managed role.
 3. Select **Delete** and confirm the action.

Users assigned to the deleted role are automatically moved to Subscriber before 
the role is removed.

#### Understanding the role directory

 * **Role Display Name:** The user-facing role name.
 * **Role Key:** The permanent technical identifier used by WordPress.
 * **Source:** WordPress Core, BBA User Role Manager, or a likely third-party source.
 * **Access:** Whether the role is manageable or read-only.
 * **Actions:** Capability-management and deletion controls for plugin-owned roles.

### Support

For help, bug reports, or feature requests, use the [WordPress.org support forum](https://wordpress.org/support/plugin/builtbyamit-user-role-manager/).

Additional plugin information is available on the [BBA User Role Manager project page](https://builtbyamit.com/projects/bba-user-role-manager/).

## Screenshots

[⌊The BBA User Role Manager dashboard showing plugin-managed, WordPress core, and
third-party roles in one organized directory.⌉⌊The BBA User Role Manager dashboard
showing plugin-managed, WordPress core, and third-party roles in one organized directory
.⌉[

The BBA User Role Manager dashboard showing plugin-managed, WordPress core, and 
third-party roles in one organized directory.

[⌊Create a custom WordPress user role using a human-readable display name and a 
unique role key.⌉⌊Create a custom WordPress user role using a human-readable display
name and a unique role key.⌉[

Create a custom WordPress user role using a human-readable display name and a unique
role key.

[⌊Plugin-created roles are clearly identified and provide capability-management 
and deletion actions.⌉⌊Plugin-created roles are clearly identified and provide capability-
management and deletion actions.⌉[

Plugin-created roles are clearly identified and provide capability-management and
deletion actions.

[⌊Manage selected WordPress capabilities through a clear, grouped permission interface.⌉⌊
Manage selected WordPress capabilities through a clear, grouped permission interface
.⌉[

Manage selected WordPress capabilities through a clear, grouped permission interface.

[⌊WordPress core and third-party roles remain visible but protected as read-only.⌉⌊
WordPress core and third-party roles remain visible but protected as read-only.⌉[

WordPress core and third-party roles remain visible but protected as read-only.

[⌊Clear WordPress admin notices confirm successful role creation and capability 
updates.⌉⌊Clear WordPress admin notices confirm successful role creation and capability
updates.⌉[

Clear WordPress admin notices confirm successful role creation and capability updates.

## Installation

#### Install from WordPress

 1. Open **Plugins > Add New Plugin** in the WordPress dashboard.
 2. Search for **BBA User Role Manager**.
 3. Select **Install Now**, then **Activate**.
 4. Open **BBA User Role Manager** from the WordPress admin sidebar.

#### Install from a ZIP file

 1. Open **Plugins > Add New Plugin**.
 2. Select **Upload Plugin**.
 3. Choose the `builtbyamit-user-role-manager` ZIP file.
 4. Select **Install Now**, then activate the plugin.

## FAQ

### What is a WordPress user role?

A role is a collection of capabilities that controls what a user can do in WordPress.
For example, a role may allow someone to edit posts without giving them access to
site settings.

### What permissions does a new role receive?

New roles inherit the site’s current Subscriber capabilities. On a standard WordPress
installation, this provides basic login and reading access without content-management
permissions.

### Can I modify WordPress core roles?

No. Administrator, Editor, Author, Contributor, and Subscriber are protected from
modification and deletion.

### Can I edit roles created by another plugin?

No. Third-party roles are displayed for visibility but remain read-only. This prevents
BBA User Role Manager from taking ownership of another plugin’s data.

### Can I manage WooCommerce or membership-plugin capabilities?

The current version exposes a focused selection of common WordPress capabilities.
It does not manage WooCommerce-specific or other third-party capabilities.

### Can I create a role with no capabilities?

Every plugin-created role retains the basic `read` capability so assigned users 
can sign in.

### Can I rename an existing role?

The current version does not provide role renaming. Choose the display name and 
permanent role key carefully before creating the role.

### Can two roles use the same role key?

No. Every role key must be unique across WordPress and all installed plugins.

### What happens when I delete a custom role?

Users assigned to the role are automatically reassigned to Subscriber before the
role is removed.

### Will custom roles disappear when I deactivate the plugin?

No. Custom roles and plugin tracking information remain available after deactivation.
Reactivating the plugin restores normal management.

### What happens when I uninstall the plugin?

Uninstalling removes the plugin’s tracking options but deliberately leaves custom
WordPress roles intact to avoid unexpectedly disrupting assigned users. Back up 
the database before uninstalling if you may need to manage those roles again.

### Who can access the plugin settings?

Only users with the `manage_options` capability can access or change plugin settings.

### Does the plugin collect personal information?

No. The plugin has no telemetry, analytics, external API calls, or user-tracking
functionality.

### Does the plugin add frontend output?

No. BBA User Role Manager works in the WordPress administration area and does not
add frontend content.

### Is the plugin translation-ready?

Yes. User-facing PHP strings use the published `builtbyamit-user-role-manager` text
domain, and the plugin includes a POT translation template.

### Does the plugin support WordPress Multisite?

The plugin does not provide dedicated network-wide role synchronization. Roles should
be managed within the relevant individual site.

### Is it safe to grant manage_options?

The `manage_options` capability provides access to sensitive site settings. Grant
it only to fully trusted users who require administrator-level settings access.

## Reviews

There are no reviews for this plugin.

## Contributors & Developers

“BBA User Role Manager” is open source software. The following people have contributed
to this plugin.

Contributors

 *   [ amitworx ](https://profiles.wordpress.org/amitworx/)

[Translate “BBA User Role Manager” into your language.](https://translate.wordpress.org/projects/wp-plugins/builtbyamit-user-role-manager)

### Interested in development?

[Browse the code](https://plugins.trac.wordpress.org/browser/builtbyamit-user-role-manager/),
check out the [SVN repository](https://plugins.svn.wordpress.org/builtbyamit-user-role-manager/),
or subscribe to the [development log](https://plugins.trac.wordpress.org/log/builtbyamit-user-role-manager/)
by [RSS](https://plugins.trac.wordpress.org/log/builtbyamit-user-role-manager/?limit=100&mode=stop_on_copy&format=rss).

## Changelog

#### 1.0.2

 * Confirmed compatibility with WordPress 7.1.

#### 1.0.1

 * Changed the user-facing product name to BBA User Role Manager.
 * Added a translation template and language-directory metadata.
 * Updated the plugin project URL.
 * Improved WordPress Coding Standards compliance.
 * Improved clean release packaging.

#### 1.0.0

 * Initial public release.
 * Added custom role creation and deletion.
 * Added selected capability management.
 * Added the registered-role directory and source labels.
 * Added protection for WordPress core and third-party roles.

## Meta

 *  Version **1.0.2**
 *  Last updated **3 weeks ago**
 *  Active installations **Fewer than 10**
 *  WordPress version ** 6.0 or higher **
 *  Tested up to **7.1**
 *  PHP version ** 7.4 or higher **
 *  Language
 * [English (US)](https://wordpress.org/plugins/builtbyamit-user-role-manager/)
 * Tags
 * [access-control](https://vec.wordpress.org/plugins/tags/access-control/)[capabilities](https://vec.wordpress.org/plugins/tags/capabilities/)
   [user management](https://vec.wordpress.org/plugins/tags/user-management/)[user permissions](https://vec.wordpress.org/plugins/tags/user-permissions/)
   [user roles](https://vec.wordpress.org/plugins/tags/user-roles/)
 *  [Advanced View](https://vec.wordpress.org/plugins/builtbyamit-user-role-manager/advanced/)

## Ratings

No reviews have been submitted yet.

[Your review](https://wordpress.org/support/plugin/builtbyamit-user-role-manager/reviews/#new-post)

[See all reviews](https://wordpress.org/support/plugin/builtbyamit-user-role-manager/reviews/)

## Contributors

 *   [ amitworx ](https://profiles.wordpress.org/amitworx/)

## Support

Got something to say? Need help?

 [View support forum](https://wordpress.org/support/plugin/builtbyamit-user-role-manager/)