I have set up a user group named Administrators, to be used for the person in charge of managing the website day to day. But I didn't tick the Admin box as I don't want them to be able to access plugins or updates etc.

I want them to be able to create users and fine tune the permissions of the users they create. So I ticked all the boxes in the User section. But if I log in as that Administrator I am allowed to change my own permissions (and all the other users) to access plugins.

This can't be right, how do I prevent them increasing their own permissions beyond those I have allocated them?

  • Create another role for managing website and assign capabilities only that you wanna give so admin role will be untouched
    – user5332
    Commented Jun 27, 2016 at 9:42

1 Answer 1


You should consider voting for this feature request: https://github.com/craftcms/cms/issues/915

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service and acknowledge you have read our privacy policy.

Not the answer you're looking for? Browse other questions tagged or ask your own question.