The Access Revolution

WordPress security

Secure WordPress Backend Menu with Advanced Access Manager

Watch on YouTube ↗

About this video

Learn how to restrict WordPress admin menu access by role or user, block direct access to restricted pages, and handle new menu items with AAM.

Admin menu links can expose more functionality than a role needs. This tutorial shows how to use AAM to restrict menu items for roles and individual users, including direct access to the underlying admin pages.

What you’ll see

  • Remove unnecessary admin menu items for a role or user.
  • Override role settings for a particular user.
  • Use default-deny menu access to account for new items added by plugins or themes.

Read Streamlining WordPress backend menu access for the written guide. To restrict the entire admin area, see the aam_access_dashboard capability.

Up next

5:03Access management Managing Roles and Capabilities in WordPressSee how AAM creates and edits WordPress roles, copies permissions, manages role inheritance, and grants or removes individual capabilities.Watch the video 15:09Getting started Advanced Access Manager UI Overview for WordPressTour the AAM interface and see how WordPress roles, users, visitors, and default access levels connect to its access controls and security tools.Watch the video 6:39WordPress security Why hiding wp-login.php does not secure WordPressSee why hiding the WordPress login page cannot stop automated attacks through XML-RPC, and learn where stronger authentication controls help.Watch the video