WCM controls user access through two privilege types: administrative privileges assigned by passport (what users can configure and manage) and editorial privileges assigned by role (which content areas users can edit) — a passport is required before any roles can be granted.
💡Quick answers
- What is the difference between a passport and a role? A passport sets administrative access (site management, user management, etc.); a role sets editorial access (which pages or sections a user can edit).
- Do users need a passport before getting a role? Yes — users must have an administrative passport before editorial roles can be assigned to them.
- What are the two main privilege categories? Administrative Passports and Editorial Privileges — each has a dedicated sub-article with full details.
Use passports, privileges, and roles to set what your users can and can't do.
There are two types of privileges you can assign users: administrative and editorial.
Administrative privileges determine what a user can configure and manage, such as their personal account, other users, and website content. Administrative privileges are assigned by passport.
Editorial privileges are assigned by role. These roles determine what content areas of the site users have permission to edit.
Users must have an administrative passport to be assigned editorial roles. For example, the Registered User passport.