AAM documentation
Find the right answer.
Build with confidence.
Explore 66 articles, 42 quick answers, and 6 reference guides.
Developer reference
Reference guides
Learn in depth
Articles
66 articlesAAM General1
Abilities & MCP1
Access Governance Pathways3
Access Policies1
Backend Access6
For Developers1
Fundamentals8
- Installation
- Introduction to the AAM UI
- Overview of strategic thinking about WordPress access
- Unpacking the structure of AAM functionality
- AAM Non-negotiable rules
- Understanding the access controls inheritance mechanism
- AAM compatibility with other plugins or themes
- Resolving access control ambiguity in WordPress
Other1
Other Goodies8
- How to manage access to the website based on user's IP address or geo location
- Managing access to the WordPress website URLs
- Managing JWT tokens for WordPress
- Securing WordPress RESTful API endpoints
- Strengthening WordPress login security with AAM
- Underestimated aspect of API access controls
- Understanding complexity behind password protecting the whole WordPress website
- Unlocking multilingual content access management with WPML
Protected Files5
Redirects5
Restricted Content5
Security Audit Service15
- What is AAM security audit and how it works
- The importance of preserving WordPress core roles and capabilities to avoid conflicts
- A critical integrity and security warning for altering the structure of the WordPress core option _user_roles
- Security concerns with high-privilege WordPress roles in content moderation
- The importance of following WordPress core naming conventions for roles and capabilities
- Security risks of having too many Administrator and Editor accounts on a WordPress site
- The hidden perils of invisible WordPress roles and why they can cause trouble for website access management
- Beware of registered empty roles on a WordPress website
- WordPress Application Passwords - The Invisible Credentials You Need to Monitor
- Misuse of high-privilege WordPress capabilities
- Security risks of elevated user access and multiple high-privilege accounts in WordPress
- The danger of altering default WordPress core roles
- The importance of protecting the WordPress RESTful API auto-discover endpoint
- The importance of disabling the WordPress XML-RPC endpoint for website security
- The security implications of not having a read-only WordPress file system
Users, Roles & Capabilities6
Straight to the point
Questions & answers
42 answersAAM General6
Authentication & Login Experience2
Backend Access4
Content Access11
- Can I manage access to multilingual content?
- How to allow WordPress users editing only their own page?
- How to change HTTP 401 for restricted files?
- How to configure content writers to create content in specific categories or tags?
- How to manage access to pages and their sub-pages?
- How to prevent user from managing categories?
- How to prevent users from publishing draft content in WordPress?
- How to protect WordPress files with a custom file structure?
- How to restrict a user from creating new posts?
- How to set a default access to all posts or pages?
- What is the difference between HIDDEN and RESTRICTED options?
Licensing & Billing9
- How can I download an invoice for my purchase?
- Do I have to buy a new license if I exceed the limit?
- How does licensing work with WP multisite?
- How does the license limit work?
- How does the pricing work?
- How to find your license key before contacting support?
- How to resolve the unlicensed premium add-on was detected message?
- How to update your license email?
- What does the "alias" status mean on the list of license installations?