Access Control

Your plugin. Their rules.

Decide which roles see which modules. Per-module permissions. No code, no constants, no guessing.

Take command in minutes View product

Interface examples use sample data. Results, counts, and timing vary by site and configuration.

How it works

Pick a module. Pick the roles.

Choose a module

Navigator, Shortcuts, Custom Commands, Macros. Each one has its own permission card.

Select roles

Check the WordPress roles that should have access. Administrator, Editor, Author, custom roles.

Save

One click. Permissions apply instantly. No code, no constants, no file editing.

Per-page control

Every page. Its own lock.

Module role settings control access to the supported admin pages. Execution also checks the current actor or stored automation owner; page visibility is not the only permission boundary.

Navigator Modal

The command palette itself

Shortcuts

Keyboard shortcut management

Custom Commands

User-created PHP/JS commands

Macro Commands

Multi-step workflows

Scheduled Commands

Cron-based execution

Startup Commands

Commands on page load

Email Templates

Drag-and-drop builder

Variables

Global {{var.x}} tokens

APIs

Saved HTTP endpoints

APIs Logs

Request / response history

Email Logs

Every macro-sent email

Document Logs

Every generated PDF

Access Control

This page itself

Scenarios

Built for real teams.

Whether you manage one site or twenty-five, access control adapts to your workflow.

Agency Give clients navigator access, keep macros locked to your team

Multi-author blog Editors get shortcuts, authors get the navigator only

WooCommerce store Shop managers run commands, subscribers see nothing

Solo admin Leave defaults. Only administrators access everything

FAQ

Questions? Answered.

What happens if no role is selected?

Only administrators can access that module. It's the safe default.

Does it work with custom roles?

Yes. Any role registered in WordPress shows up automatically. WooCommerce Shop Manager, custom roles from plugins, all of them.

Can I lock myself out?

You can exclude your own role when a module has a nonempty allow-list. Plan changes carefully and keep an administrator recovery path. Empty allow-lists default to administrators.

Does this replace WordPress capabilities?

No. It's an additional layer on top. WordPress core capabilities still apply. This controls TrueCommander module visibility only.

Ready?

Give the right access. Keep the rest locked.

Set permissions in under a minute. No code required.

Take command in minutes View all modules

14-day money-back guarantee We stand behind TrueCommander. If it's not the right fit within 14 days, request a refund through our support. Terms apply per our refund policy.