Who can do what, and why it matters.
THE PRINCIPLE
Give each person the lowest role that lets them do their job, and their own account rather than a shared one.
THE ROLES
- Administrator: everything, including installing plugins. Very few people need this.
- Shop Manager: orders, products, customers and reports, without touching plugins or settings. This is the right role for most staff.
- Editor and Author: content only.
- Customer: a shopper.
PRACTICAL POINTS
Never share one login. You cannot tell who did what, and you cannot revoke one person's access. Remove accounts when people leave, the same day. Review the user list monthly. An administrator account you do not recognise is a compromise. Two-factor authentication on every account with admin or shop manager access.
FOR DEVELOPERS
Give them their own administrator account for the duration of the work, and remove it when finished. Do not share yours.
FOR THE ORIGINAL BUILDER
If someone built the shop and no longer works with you, check whether their account still exists.
