aam_capability_is_allowed_filter

Purpose

Override a capability grant decision.

Callback

Example

add_filter('aam_capability_is_allowed_filter', function ($result, $capability, $resource) {
    if ($capability === 'delete_users') {
        return false;
    }
    return $result;
}, 10, 3);

Denies delete_users even when an AAM rule allows it; every other capability keeps its existing result.

See the complete hook list.