SEOPress uses custom WordPress capabilities to control access to settings pages and certain content types. Grant the access a role needs, then verify the result using an account with that role.
Enable the Advanced module first
Go to SEO → Advanced and ensure the module is enabled. The mapping from SEOPress settings pages to its custom capabilities depends on this switch. Assigning a capability alone does not replace this prerequisite.
Allow access to settings pages
- As an administrator, open SEO → Advanced → Security.
- Find the section for SEOPress settings pages.
- For each page, check the roles allowed to access it.
- Save changes, then sign in with a test account holding the target role and check the page and its saving behavior.
For example, you can allow an editor to manage Titles & Metas without giving them every WordPress administrator permission. Features belonging to PRO still require PRO.
The settings-page capabilities are:
seopress_manage_dashboardseopress_manage_titles_metasseopress_manage_social_networksseopress_manage_xml_html_sitemapseopress_manage_analyticsseopress_manage_instant_indexingseopress_manage_advancedseopress_manage_botseopress_manage_licenseseopress_manage_proseopress_manage_schemasseopress_manage_tools
Settings access is different from editing content
A settings-page capability does not, by itself, let someone edit every post, page, redirect or schema. WordPress content permissions and the capabilities of the relevant post type still apply.
The Security tab also contains restrictions for the SEO metabox and Content Analysis. Their checkboxes have the opposite purpose: checked roles are blocked from editing the corresponding metabox. In the settings-page section, checked roles are allowed. Review both sections if an account can open a settings page but cannot edit SEO data in the editor.
Broken links
The broken-link content type uses these capabilities:
edit_broken_linkedit_broken_linksedit_others_broken_linkspublish_broken_linksread_broken_linkread_private_broken_linksdelete_broken_linkdelete_broken_linksdelete_others_broken_linksdelete_published_broken_links
Redirections
The redirection content type uses the following capabilities. See also the redirection permissions guide.
delete_others_redirectionsdelete_published_redirectionsdelete_redirectionsedit_others_redirectionsedit_redirectionspublish_redirectionsread_private_redirections
Schemas
The schema content type uses these capabilities:
delete_others_schemasdelete_published_schemasdelete_schemasedit_others_schemasedit_schemaspublish_schemasread_private_schemas
SEOPress Insights
Insights has separate capabilities for its administration pages:
seopress_insights_manage_backlinksseopress_insights_manage_competitorsseopress_insights_manage_dashboardseopress_insights_manage_licenseseopress_insights_manage_rankingsseopress_insights_manage_settings
To manage those capabilities, you can use User Role Editor. Install and activate it, open Users → User Role Editor, select the role, check the required capabilities and save with Update. Keep a separate administrator account available while testing permissions.
Troubleshooting access
- Confirm the Advanced module is active.
- Check the account’s actual role and any other role-management plugin.
- Use the SEOPress Security settings for the settings pages they manage; a manual capability assignment can be affected by SEOPress role synchronization.
- Check metabox restrictions separately from settings-page permissions.
- For redirects, schemas and broken links, verify the content-type capabilities as well as access to the corresponding feature.
- Test with the affected account, not only an administrator account.
Role synchronization and resets in SEOPress 10.3
For settings areas explicitly configured in the Security tab, SEOPress grants the checked roles access and removes access from unchecked roles. Areas never configured there are left untouched by that synchronization. Resetting the Advanced settings revokes the permissions managed through those settings; administrator access is preserved. Review delegated access after a reset before giving the site back to its users.