Hi @sfarnsworth ,
Good question, and a reasonable ask when you’re managing client sites and bringing in outside vendors.
Right now the plugin’s settings screens are gated to WordPress’s standard manage_options capability (i.e. full administrators), and that requirement isn’t filterable yet, so there’s no built-in option to grant just this plugin to a custom, non-admin role.
The only workaround available today is to grant the manage_options capability to a custom role using a role-management plugin such as Members or User Role Editor. One important caveat: manage_options unlocks *all* of WordPress’s Settings menus, not only this plugin, so for a vendor you don’t want to give the keys to, that’s broader access than you’re probably after.
A properly scoped option that points the plugin’s access to a specific capability or role isn’t something it supports today, but it’s a sensible request, and I’m logging it as a feature request on our side. (We already make our meta-tag health-check capability filterable, so extending that pattern to the settings pages is exactly the kind of thing we’d look at.) I can’t promise a date, but it’s on our radar.
If you can share what the vendor actually needs to do, just view the sitemap configuration, or change settings? I’m happy to suggest the least-privileged setup that works with today’s release.
Thanks for using the plugin!
