{"id":502,"date":"2019-11-15T15:12:08","date_gmt":"2019-11-15T15:12:08","guid":{"rendered":"https:\/\/sdf-docs.mansystems.com\/docs\/acr-rules\/security\/roles-to-manage-users\/"},"modified":"2021-07-30T09:09:53","modified_gmt":"2021-07-30T09:09:53","slug":"adminsmanageusers","status":"publish","type":"docs","link":"https:\/\/sdf-docs.clevr.com\/?docs=acr-rules\/security\/adminsmanageusers","title":{"rendered":"Only &#8220;admin&#8221; roles should manage other users"},"content":{"rendered":"\n<p>Roles without a specific string in their name (default &#8216;<em>Admin<\/em>&#8216;) should not be given rights to manage other roles.<\/p>\n\n\n\n<p>So their user management permissions should look like:<\/p>\n\n\n\n<figure class=\"wp-block-image\"><img loading=\"lazy\" decoding=\"async\" width=\"551\" height=\"255\" src=\"https:\/\/sdf-docs.clevr.com\/wp-content\/uploads\/2020\/05\/screenshot.png\" alt=\"\" class=\"wp-image-1470\" srcset=\"https:\/\/sdf-docs.clevr.com\/wp-content\/uploads\/2020\/05\/screenshot.png 551w, https:\/\/sdf-docs.clevr.com\/wp-content\/uploads\/2020\/05\/screenshot-480x222.png 480w\" sizes=\"(min-width: 0px) and (max-width: 480px) 480px, (min-width: 481px) 551px, 100vw\" \/><\/figure>\n\n\n\n<p>Choose selected and no roles. Also do not select &#8216;(No user roles)&#8217; as that means you can manage users that do not have a user role.<\/p>\n\n\n\n<p>The default is that group names with &#8216;Admin&#8217; in the name can manage users.<\/p>\n\n\n\n<p><strong>Noncompliant example:<\/strong><\/p>\n\n\n\n<figure class=\"wp-block-image\"><img loading=\"lazy\" decoding=\"async\" width=\"735\" height=\"712\" src=\"https:\/\/sdf-docs.clevr.com\/wp-content\/uploads\/2020\/01\/image-24.png\" alt=\"\" class=\"wp-image-911\" srcset=\"https:\/\/sdf-docs.clevr.com\/wp-content\/uploads\/2020\/01\/image-24.png 735w, https:\/\/sdf-docs.clevr.com\/wp-content\/uploads\/2020\/01\/image-24-480x465.png 480w\" sizes=\"(min-width: 0px) and (max-width: 480px) 480px, (min-width: 481px) 735px, 100vw\" \/><\/figure>\n\n\n\n<p><strong>Compliant example:<\/strong><\/p>\n\n\n\n<figure class=\"wp-block-image\"><img loading=\"lazy\" decoding=\"async\" width=\"735\" height=\"787\" src=\"https:\/\/sdf-docs.clevr.com\/wp-content\/uploads\/2020\/01\/image-26.png\" alt=\"\" class=\"wp-image-913\" srcset=\"https:\/\/sdf-docs.clevr.com\/wp-content\/uploads\/2020\/01\/image-26.png 735w, https:\/\/sdf-docs.clevr.com\/wp-content\/uploads\/2020\/01\/image-26-480x514.png 480w\" sizes=\"(min-width: 0px) and (max-width: 480px) 480px, (min-width: 481px) 735px, 100vw\" \/><\/figure>\n","protected":false},"featured_media":0,"parent":96,"menu_order":10,"comment_status":"open","ping_status":"closed","template":"","doc_tag":[],"class_list":["post-502","docs","type-docs","status-publish","hentry"],"comment_count":0,"_links":{"self":[{"href":"https:\/\/sdf-docs.clevr.com\/index.php?rest_route=\/wp\/v2\/docs\/502"}],"collection":[{"href":"https:\/\/sdf-docs.clevr.com\/index.php?rest_route=\/wp\/v2\/docs"}],"about":[{"href":"https:\/\/sdf-docs.clevr.com\/index.php?rest_route=\/wp\/v2\/types\/docs"}],"replies":[{"embeddable":true,"href":"https:\/\/sdf-docs.clevr.com\/index.php?rest_route=%2Fwp%2Fv2%2Fcomments&post=502"}],"version-history":[{"count":5,"href":"https:\/\/sdf-docs.clevr.com\/index.php?rest_route=\/wp\/v2\/docs\/502\/revisions"}],"predecessor-version":[{"id":1471,"href":"https:\/\/sdf-docs.clevr.com\/index.php?rest_route=\/wp\/v2\/docs\/502\/revisions\/1471"}],"up":[{"embeddable":true,"href":"https:\/\/sdf-docs.clevr.com\/index.php?rest_route=\/wp\/v2\/docs\/96"}],"next":[{"title":"Only named\/registered users should be allowed","link":"https:\/\/sdf-docs.clevr.com\/?docs=acr-rules\/security\/noanonymoususers","href":"https:\/\/sdf-docs.clevr.com\/index.php?rest_route=\/wp\/v2\/docs\/504"}],"prev":[{"title":"If an anonymous user is allowed to change objects, constrain these objects to the owner","link":"https:\/\/sdf-docs.clevr.com\/?docs=acr-rules\/security\/securityanonymoususercreateconstrainedobjects","href":"https:\/\/sdf-docs.clevr.com\/index.php?rest_route=\/wp\/v2\/docs\/1480"}],"wp:attachment":[{"href":"https:\/\/sdf-docs.clevr.com\/index.php?rest_route=%2Fwp%2Fv2%2Fmedia&parent=502"}],"wp:term":[{"taxonomy":"doc_tag","embeddable":true,"href":"https:\/\/sdf-docs.clevr.com\/index.php?rest_route=%2Fwp%2Fv2%2Fdoc_tag&post=502"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}