Allowed Switcher Roles
Restrict which WordPress roles are allowed to start a switch session.
Navigate to SwitchGuard → Settings → Access Control → Allowed Switcher Roles.
This setting is available in both the free and Pro versions of SwitchGuard. It works alongside Pro-specific access controls such as IP Allowlist, Locked Users, and User Grants.
Settings
| Setting | Default | Description |
|---|---|---|
| Allowed Switcher Roles | (none selected) | Only users whose role matches one of the checked options can start a switch session. |
Default Behaviour (No Roles Selected)
When no roles are checked, SwitchGuard falls back to WordPress default behaviour: any user with the edit_users capability can initiate switching. On a standard WordPress install this means Administrators only.
Role-Based Restriction
When one or more roles are selected:
- Only users whose WordPress role matches a checked role can switch.
- The
edit_userscapability check is replaced by the role membership check. - The role-hierarchy guard (actor must outrank target in level) still applies regardless.
- All other Pro access controls (IP allowlist, locked users, scheduled window, per-user grants) continue to apply on top of this check.
Checking a role that does not normally hold edit_users (e.g. Editor or Shop Manager) grants those users the ability to start switching sessions. Only check roles you fully trust with user access.
Interaction with Pro Controls
| Control | Relationship |
|---|---|
| IP Allowlist | Applied in addition — role check AND IP check must both pass |
| Scheduled Window | Applied in addition — role check AND window check must both pass |
| Locked Users | Target lock is checked after the role check passes |
| User Grants | Per-user grants are a separate mechanism — they allow switching for a specific actor/target pair regardless of role settings |
| Re-Authentication | Still triggered for privileged targets when enabled |
Common Configurations
| Use Case | Configuration |
|---|---|
| Admin-only switching (default) | Leave all unchecked |
| Allow Shop Managers to assist customers | Check Shop Manager |
| Allow Admins and Editors | Check Administrator and Editor |
For team workflows requiring non-admin switching, User Grants offers more granular control — granting a specific actor permission to switch to specific target users, without broadly opening an entire role.