Role Hierarchy

SwitchGuard uses WordPress role levels (0–10) to prevent privilege escalation.

Role Levels

Enforcement Rules

1. The switching user must have the edit_users capability.
2. The target user's role level must be lower than the switcher's level.
3. If Block Admin Targets is enabled, users with level 10 (Administrator) cannot be switched to, even by other administrators.