Role Hierarchy

SwitchGuard uses WordPress role levels (0–10) to prevent privilege escalation.

Role Levels

Enforcement Rules

1. The switching user must have the edit_users capability or belong to a role listed in Allowed Switcher Roles (if that setting is configured). See Allowed Switcher Roles.
2. The target user's role level must be lower than the switcher's level.
3. If Block Admin Targets is enabled, users with level 10 (Administrator) cannot be switched to, even by other administrators.