Allowed Switcher Roles
Restrict which WordPress roles are allowed to start a switch session.
Navigate to SwitchUser → Settings → Access Control → Allowed Switcher Roles.
This setting is available in both the free and Pro versions of SwitchUser. It works alongside Pro-specific access controls such as IP Allowlist, Locked Users, and User Grants.
Settings
| Setting | Default | Description |
|---|---|---|
| Allowed Switcher Roles | (none selected) | Only users whose role matches one of the checked options can start a switch session. |
Default Behaviour (No Roles Selected)
When no roles are checked, SwitchUser falls back to WordPress default behaviour: any user with the edit_users capability can initiate switching. On a standard WordPress install this means Administrators only.
Role-Based Restriction
When one or more roles are selected:
- Only users whose WordPress role matches a checked role can switch.
- The
edit_userscapability check is replaced by the role membership check. - The role-hierarchy guard (actor must outrank target in level) still applies regardless.
- All other Pro access controls (IP allowlist, locked users, scheduled window, per-user grants) continue to apply on top of this check.
Checking a role that does not normally hold edit_users (e.g. Editor or Shop Manager) grants those users the ability to start switching sessions. Only check roles you fully trust with user access.
Interaction with Pro Controls
| Control | Relationship |
|---|---|
| IP Allowlist | Applied in addition — role check AND IP check must both pass |
| Scheduled Window | Applied in addition — role check AND window check must both pass |
| Locked Users | Target lock is checked after the role check passes |
| User Grants | Narrow things further - limit who can switch into a user, or which users a switcher can reach. They never add permissions |
| Locked users / role hierarchy | Always apply, whatever the role settings |
Common Configurations
| Use Case | Configuration |
|---|---|
| Admin-only switching (default) | Leave all unchecked |
| Allow Shop Managers to assist customers | Check Shop Manager |
| Allow Admins and Editors | Check Administrator and Editor |
To let a role switch but only into specific accounts, combine Allowed Switcher Roles with User Grants - for example, allow Shop Managers, then limit each one to their assigned customers.