Temporary administrator accounts for delegated work

Controlled Admin Access Pro lets site administrators create restricted accounts for people handling WordPress dashboard work, including theme designers, add-on developers, and support agents. Choose the areas an account can use, then disable it when the task ends.

Disabling an account blocks login while retaining its information for possible reactivation. An expiration time also ends dashboard access after a set period. You can change or extend that time if the task needs more access.

Menu access and supported extension pages

Choose the admin menu items a restricted administrator may access. The plugin can conceal selected items and block their related pages if someone tries to open them directly.

Pro adds controls for internal pages in WooCommerce, Easy Digital Downloads, and BuddyPress. For example, allow WooCommerce Settings while restricting the Payments Gateways tab. Internal-page support currently includes these three add-ons.

Passwordless login and navigation controls

Generate a secure login URL that lets a restricted user enter the dashboard without a password. You can also disable password login, which prevents login by password and password-reset email requests.

The plugin can hide admin bar links in both the frontend and administration areas, limiting the navigation and actions visible to a restricted account.

Activity logs and remote logout

The activity log entries more than 20 actions. Examples include activating, deactivating, or deleting a plugin; switching or deleting a theme; exporting data; publishing or deleting a post; and uploading a file. Review its entries to see the actions it tracks during an account's login.

To end access immediately, use remote logout to force the restricted administrator out of all logged-in devices and locations.

Set up delegated access

1. Install and activate Controlled Admin Access Pro.
2. Create a restricted administrator account for the person doing the work.
3. Choose permitted menu items, internal pages, expiration settings, and other access controls.
4. Send the account details or generate a login URL.
5. Review activity, then disable the account or remotely log it out when the task is complete.