---
title: Access Control
description: The Access Control screen lets you control which WordPress roles can use AtlasMCP modules, abilities, and workflows. You can assign access at the role level, giving each WordPress role access only to the capabilities you want them to use. Roles…
url: "https://wpatlasmcp.com/docs/access-control/"
updated: "2026-09-27"
category: "Usage & Setup"
---

# Access Control

The Access Control screen lets you control which WordPress roles can use AtlasMCP modules, abilities, and workflows.

You can assign access at the role level, giving each WordPress role access only to the capabilities you want them to use. Roles without any assignments receive no AtlasMCP access.

To allow or disallow abilities based on user roles follow the below instruction:

Navigate to AtlasMCP plugin dahsboad → click **Access Control** tab.

![atlasmcp access control](https://wpatlasmcp.com/wp-content/uploads/2026/09/atlasmcp-access-control-1024x724.jpeg)
atlasmcp access control

## Access Control Overview

AtlasMCP provides separate access controls for:

- **Abilities** — Control which abilities each WordPress role can use.
- **Workflows** — Control which workflows each role can access.

Use the **Role** selector to choose the WordPress role you want to configure.

Available roles can include:

- **Administrator**
- **Editor**
- **Author**
- **Contributor**

### AtlasMCP Modules

The AtlasMCP section can include modules such as:

- **AI Content Steward — 22/22**
- **Media Manager — 7/7**
- **Users Manager — 7/7**
- **Custom Post Types Manager — 6/6**
- **Pages Manager — 5/5**
- **Site Info & Diagnostics — 4/4**
- **REST API Tools — 3/3**
- **Settings Manager — 3/3**

The numbers show how many abilities from each module are currently assigned to the selected role.

For example, **AI Content Steward 22/22** means all 22 available abilities from that module are granted to the selected role.

### Other Plugins

Abilities provided by WordPress core or other plugins are also listed separately.

For example:

- **WordPress Core — 3/3**

This allows you to control access to abilities that do not originate from AtlasMCP's built-in modules.

## Managing Access by Role

Access Control lets you configure each WordPress role independently.

For example:

- **Administrator** can be given access to all available abilities.
- **Editor** can be limited to content-related abilities.
- **Author** can be given access only to abilities required for creating and managing their content.
- **Contributor** can receive a more restricted set of abilities.

The exact access available to each role depends on the abilities you assign.

## Removing Access

To remove an ability from a role:

1. Select the WordPress role you want to modify.
2. Find the module or ability you want to restrict.
3. Deselect the ability.
4. Save the changes.

You can also use **Deselect all** to remove all currently assigned abilities from the selected role.

## Access Control and AI Clients

Access Control works together with the permissions of the connected WordPress user.

When an AI client connects through AtlasMCP, the available actions are determined by the user's WordPress role and the abilities assigned to that role.

This allows you to control what different users and their connected AI clients can access without giving every role access to every AtlasMCP ability.