Unlocking Super Admin Access: A Step-by-Step Guide to Adding a Super Admin User Role in WordPress Multisite

After managing WordPress multisite networks for our projects, we’ve learned the importance of establishing the correct user roles from the beginning. One of the most powerful yet often misunderstood roles is that of the Super Admin.

We’ve assisted users who found themselves locked out of their networks or who inadvertently granted excessive control to others.

If you’re operating a multisite network, it’s crucial to understand how to safely assign or recover Super Admin access. This ensures that the right individuals have complete control while preventing unauthorized access.

In this guide, we’ll provide a detailed walkthrough on how to add a Super Admin in WordPress multisite. We’ll explore both the straightforward dashboard method and the emergency manual approach, along with tips on how to secure these powerful accounts.

Here are the topics we will discuss in this guide:

Understanding the Super Admin User Role in WordPress

WordPress features a variety of user roles, each with distinct permissions for managing different aspects of a WordPress site. For more information, check out our beginner’s guide on WordPress user roles and their capabilities.

The ‘Super Admin’ is a unique user role in WordPress, specifically available for websites that utilize the WordPress multisite functionality.

The multisite feature enables the creation of multiple websites within a single WordPress installation, allowing each site to have its own ‘Administrator(s)’ responsible for managing that particular site.

In contrast, a user assigned the Super Admin role can oversee all websites within the WordPress multisite network. This includes the ability to install plugins and themes, as well as manage settings that influence all sites.

While Regular Administrators can only manage individual sites, Super Admins have the authority to implement changes that affect every site in the network.

Exercise caution when assigning the Super Admin role. Given that Super Admins have comprehensive access, this role should only be granted to individuals you completely trust, as a single incorrect modification can impact the entire network.

Step 1: How to Add a New Super Admin User in WordPress Multisite

This straightforward method allows you to add new users with Super Admin roles in your WordPress multisite, provided you are already logged in as a Super Admin.

Start by logging into the WordPress admin dashboard and hover over the ‘My Sites’ menu located at the top left corner of your screen.

Next, navigate to the Network Admin » Users page.

On this page, you can manage all the users on your site. Click the ‘Add New User’ button at the top to proceed.

This action will take you to the Add New User page.

Experienced WordPress users will notice that this page differs from the one used for single sites. Here, you can only enter a username and email address without the option to select a user role.

For now, simply enter the username and email address of the user you wish to add, then click the ‘Add User’ button.

WordPress will save the details and automatically send an email to the user, prompting them to set their password.

Next, you need to grant this user ‘Super Admin’ privileges.

To do this, go to the Users » All Users page and find the user you just added.

Hover over the username and click the ‘Edit’ link.

This action will take you to the ‘Edit User’ page.

Next, scroll down to the ‘Super Admin’ section and check the box labeled ‘Grant this user super admin privileges for the Network.’

Then, scroll down to the bottom of the page.

Make sure to click the ‘Update User’ button to apply your changes.

WordPress will now save the modifications you made to the user account and provide them with Super Admin permissions.

You will receive a confirmation message indicating that the user has been granted Super Admin privileges.

That’s it! You have successfully added a new user with the Super Admin role in WordPress.

Method 2: Manually Adding a Super Admin User in WordPress

This approach is ideal for users who are locked out of the WordPress admin area and cannot add Super Admin users through the dashboard.

First, connect to your website using an FTP client or the File Manager tool in your hosting control panel.

Once connected, navigate to the /wp-content/themes/ directory and open the folder for the theme currently active on your root site.

In this folder, you will find various files and templates utilized by your WordPress theme.

You need to locate the functions.phpDownload the file to your computer.

Open this file using a text editor such as Notepad or TextEdit.

Next, append the following code at the end of your functions.php file:

function wpb_create_super_admin() { $username = 'newuser'; // Replace with your chosen username $password = 'password123'; // Replace with your chosen password $email = 'newuser@example.com'; // Replace with the user's email address if ( !username_exists( $username ) && !email_exists( $email ) ) { $user_id = wp_create_user( $username, $password, $email ); if ( !is_wp_error( $user_id ) ) { // Assign the Super Admin role to the new user grant_super_admin( $user_id ); } }
}
add_action( 'init', 'wpb_create_super_admin' );

Make sure to replace $username, $password, and $email with your desired values for the new Super Admin account.

Finally, remember to save your changes and upload the file back to your website.

You can now log in to the WordPress admin area of your main site using the credentials you specified in your functions file.

Important ⚠️: Remember to remove the code you added to the functions file after you have successfully logged into your Super Admin account.

How to Remove a Super Admin User in WordPress Multisite

There may be instances when you need to revoke Super Admin privileges from a user. This could be due to their departure from your team or your desire to minimize risks by restricting access.

We’ve had to perform this action on our own networks when streamlining permissions or modifying access after a transition. The good news is that it’s a straightforward process if you are already logged in as a Super Admin.

First, navigate to the top menu and hover over My Sites » Network Admin » Users.

Locate the user from whom you wish to revoke Super Admin rights and click the ‘Edit’ link beneath their username.

In the Edit User screen, scroll down to the Super Admin section.

Uncheck the option that states ‘Grant this user super admin privileges for the Network’.

Scroll down and click the ‘Update User’ button to apply your changes.

That’s all! This user will no longer have Super Admin access. However, they will still be able to manage their assigned site(s) if they hold individual roles there.

Note:Ensure that at least one trusted individual retains Super Admin access to maintain full control over the network.

Common Issues When Setting Up Super Admin Access

Occasionally, despite following all instructions, issues may arise when attempting to assign Super Admin privileges in a WordPress multisite environment.

Below are some of the most common challenges and their solutions.

1. The ‘Super Admin’ checkbox is not visible

This typically occurs if the user has not yet been added to the network. Verify that the individual you wish to promote is listed in theNetwork Admin » Userssection before attempting to modify their role.

2. The user is missing from the list

Check the email address or username you provided for accuracy. If there was a mistake or the user has not yet completed their setup email, they may not appear immediately. You can resend the invitation or recreate the user if necessary.

3. The ‘Network Admin’ menu is completely absent

This often indicates that multisite has not been properly enabled. You must verify that yourwp-config.phpfile contains the line necessary to activate multisite and that the network setup process was completed successfully.

4. Changes are not being saved

Investigate potential plugin conflicts or caching problems. Security or membership plugins may disrupt user role modifications. Temporarily disable any user management plugins and attempt the changes again.

5. Still experiencing issues?

If the previous solutions did not resolve the issue, you can manually assign Super Admin access using FTP and the functions.php file, as described earlier in this article.

Protecting Super Admin Accounts in WordPress Multisite

Many beginners have lost access to their Super Admin accounts in WordPress multisites.

Some users forget their login details, while others fall victim to hackers who gain access to their multisite, leading to significant financial and reputational harm.

We advise all users to follow our comprehensive WordPress security guide to safeguard their websites.

Here are some immediate security measures you can implement.

1. Establish Automated WordPress Backups

Ensure you are utilizing a WordPress backup plugin to automatically create and store backups of your site in a secure remote location.

We recommend using Duplicator for its user-friendly setup, secure backup creation, and reliable cloud storage. Most importantly, it allows you to restore your website effortlessly with a single click from a backup.

We utilize Duplicator on our own sites. For more information, check out our comprehensive review of Duplicator.

Important Note:A free version of Duplicator is available, but it comes with limited features. We suggest upgrading to a paid plan to access all functionalities, including multisite support.

For more information, refer to our tutorial on backing up your WordPress website.

2. Enable Two-Factor Authentication

We implement two-factor authentication for all user accounts, adding an essential layer of security to your WordPress site and making it more difficult for unauthorized users to access your Super Admin accounts.

We have created a detailed step-by-step tutorial on how to set up two-factor authentication in WordPress for beginners. It only takes a few minutes to follow, but it significantly enhances the security of your multisite accounts.

3. Verify That WordPress Emails Are Functioning

We frequently receive inquiries from userswho cannotreceive apassword reset email from their WordPress sites due to improper email deliverability settings.

By default, WordPress uses the PHP mail() function to send emails. However, this method can be exploited to send spam, leading email providers like Gmail and Outlook to flag these messages as suspicious and block them.

To resolve this issue, it’s recommended to use an SMTP service such as WP Mail SMTP. This service enables the use of the correct SMTP protocol for sending WordPress emails, ensuring that all messages are delivered securely.

Important Note:There is also a free version of WP Mail SMTP available.

We utilize WP Mail SMTP across all our websites to guarantee that users receive password reset emails and other important notifications. Check out our WP Mail SMTP review for more information.

Need assistance with the setup? We offer a comprehensive guide on how to configure WP Mail SMTP in WordPress.

Frequently Asked Questions About Super Admins in WordPress Multisite

Additional Resources for WordPress Multisite

Here are some more guides to assist you in effectively managing your WordPress multisite network as a Super Admin:

• Top Recommended WordPress Multisite Plugins (Expert Selection)
• Step-by-Step Guide to Creating a WordPress Multisite with Different Domains
• How to Transfer a Site from WordPress Multisite to a Single Installation
• Should You Activate All Plugins Network-Wide on WordPress Multisite?
• How to Add or Remove Default Pages in WordPress Multisite

We hope this guide has helped you understand how to add a Super Admin user role in WordPress multisite. You might also find our article on customizing the WordPress admin dashboard or our selection of the best plugins for enhancing the WordPress admin area useful.

If you enjoyed this article, please subscribe to our YouTube Channel for insightful WordPress video tutorials. You can also connect with us on Twitter and Facebook.