Controlled Admin Access Pro lets site administrators create restricted WordPress administrator accounts for theme designers, add-on developers, and support agents. Choose which areas each account can use, then set how long it remains available and how its visitor can sign in.

Choose where the account can work

Select the admin menu items a restricted administrator may access. The plugin can conceal selected items and block their related pages if the user tries to open them directly.

Pro adds more detailed controls for internal pages in WooCommerce, Easy Digital Downloads, and BuddyPress. For example, you can allow access to WooCommerce Settings while restricting the Payments Gateways tab.

You can also hide admin bar links at the top of the page in both the frontend and administration areas.

When access expires

Set an expiration time for each restricted administrator. Once the account expires, it can no longer be used to log in to the WordPress dashboard. Extend or change the expiration time if the work needs more time.

If you disable the account

Disable a restricted account at any time to block login. Its information remains available, so you can activate it again if further work is needed.

Choose how the user signs in

Generate a secure login URL for the restricted user to enter the dashboard without a password. You can also disable password login for restricted administrators. When you do, they cannot log in with a password or request a password-reset email.

Review activity and end sessions

The activity log entries more than 20 actions by restricted administrators. Entries can include plugin activation, deactivation, or deletion; switching or deleting a theme; exporting data; publishing or deleting a post; and uploading a file.

Use remote logout to force a restricted administrator out of all logged-in devices and locations when access should end immediately.

Set up delegated access

1. Install and activate Controlled Admin Access Pro.
2. Create a restricted administrator account for the person completing the task.
3. Choose permitted menu items, internal pages, expiration options, and other access controls.
4. Send the account details or generate a login URL.
5. Review activity, then disable the account or remotely log it out when the task is complete.