Controlled Admin Access Pro lets site administrators give theme designers, extension developers, or support agents a restricted administrator account for dashboard work. Choose the areas the account can use, then disable it when the task is complete. Its information remains available so you can activate the account again if more work is needed.

Where can a delegated administrator work?

Select the admin menu entries the account may access. The plugin can conceal selected items and block their related pages if the visitor tries to open them another way.

Pro includes detailed access controls for internal pages in WooCommerce, Easy Digital Downloads, and BuddyPress. For example, you can allow WooCommerce Settings while restricting the Payments Gateways tab.

When does access end?

Set an expiration time for each restricted administrator. After the account expires, it can no longer be used to log in to the WordPress dashboard. You can change or extend the expiry when more time is needed. Disabling an account also blocks login while keeping its information for possible future use.

How can visitors sign in, and what can they see?

Generate a secure login URL for the recipient to enter the dashboard without a password. You can also disable password login for restricted administrators, which prevents password sign-in and password-reset emails. The plugin can hide admin bar links at the top of the page in both the frontend and administration areas.

What activity can you review or end remotely?

The activity log entries more than 20 actions by restricted administrators, including plugin activation, deactivation, or deletion; theme switching or deletion; data exports; post publishing or deletion; and file uploads. Remote logout can end a restricted administrator’s logged-in sessions across all devices and locations.

Set up access for a task

1. Install and activate Controlled Admin Access Pro.
2. Create a restricted administrator account for the person doing the work.
3. Choose permitted menu items, internal pages, expiration settings, and other access controls.
4. Send the account details or generate a login URL.
5. Review activity, then disable the account or remotely log it out when the task is complete.