Title: Multisite employee admin recommendations
Last modified: August 21, 2016

---

# Multisite employee admin recommendations

 *  [Norbert McDorbert](https://wordpress.org/support/users/dadreviewed/)
 * (@dadreviewed)
 * [12 years, 7 months ago](https://wordpress.org/support/topic/multisite-employee-admin-recommendations/)
 * I am not a fan of laying plugins on top of plugins. I have already permanently
   crippled my network from one messing with permissions on network, prohibiting
   a plugin to not work without constant modificiations.
 * That being said – i need to allow someone to have superadmin, without the ability
   to update plugins, themes, core, edit files, delete sites, or change PW of admin
   users
 * What do you all suggest? Elsewise, what permissions would the above be?

Viewing 5 replies - 1 through 5 (of 5 total)

 *  Moderator [Ipstenu (Mika Epstein)](https://wordpress.org/support/users/ipstenu/)
 * (@ipstenu)
 * 🏳️‍🌈 Advisor and Activist
 * [12 years, 7 months ago](https://wordpress.org/support/topic/multisite-employee-admin-recommendations/#post-4154599)
 * > i need to allow someone to have superadmin, without the ability to update plugins,
   > themes, core, edit files, delete sites, or change PW of admin users
 * How about we phrase this the other way 🙂 What CAN these sidekick admins do?
 *  Thread Starter [Norbert McDorbert](https://wordpress.org/support/users/dadreviewed/)
 * (@dadreviewed)
 * [12 years, 7 months ago](https://wordpress.org/support/topic/multisite-employee-admin-recommendations/#post-4154603)
 * Provision sites. Users. Approve users. Update sites billing levels (pro plus 
   plugin)
 * And have access to all sites.
 * Now tht I listed the other half of roles. Does that help you be more or less 
   smarmypants? 😉
 *  Moderator [Ipstenu (Mika Epstein)](https://wordpress.org/support/users/ipstenu/)
 * (@ipstenu)
 * 🏳️‍🌈 Advisor and Activist
 * [12 years, 7 months ago](https://wordpress.org/support/topic/multisite-employee-admin-recommendations/#post-4154624)
 * I’m not being a smartypants, I just find it way easier when someone says “I want
   Foo to do Blah” – It helps people focus on what you need and not speculate. (
   Also there’s a lot more SuperAdmins can do than what you listed, hence why I 
   asked.)
 * With the exception of ‘Provision sites’ this actually is something per-site admins
   can do already.
 * Under network settings, check the box for “Allow site administrators to add new
   users to their site via the “Users → Add New” page.” That should cover Users 
   and Approve Users per site, and will automatically prevent them from editing 
   passwords/themes etc.
 * If you need this to be done for _network_ wide users, then it’s more complicated,
   because there’s no difference between being able to add users, and being able
   to control users. Since you’re adding them to a network at large, it’s something
   that impacts the network at large, just like plugins. So for that, you may have
   to explain more what you mean with adding users. Do they need to be added to 
   multiple sites, etc etc.
 * Billing levels I can’t speak for, don’t know what plugin you’re talking about,
   but since that’s _normally_ handled per-site, it would be something a site admin
   should handle for their site.
 * Provisioning sites… THAT would be the case for writing a one-off plugin that 
   would check ‘Are you an admin on your own site? Yes? Okay, you can create a new
   site.’ You would want to filter the signup form, or make your own form that only
   admins can access.
 *  Thread Starter [Norbert McDorbert](https://wordpress.org/support/users/dadreviewed/)
 * (@dadreviewed)
 * [12 years, 7 months ago](https://wordpress.org/support/topic/multisite-employee-admin-recommendations/#post-4154680)
 * Thanks Mika
 * Yes – it seems that I can do the allow to add, and If I make a template plugin(
   which i have) i can set the default on all new sites.
 * The problem becomes that the users can be revoked by other admins, and if new
   users come on, they are not supported.
 * So – one way around it would be to have 10 employee accounts, and assign employees
   to the sites. Its not perfect, but protects from admin changes.
 *  Moderator [Ipstenu (Mika Epstein)](https://wordpress.org/support/users/ipstenu/)
 * (@ipstenu)
 * 🏳️‍🌈 Advisor and Activist
 * [12 years, 7 months ago](https://wordpress.org/support/topic/multisite-employee-admin-recommendations/#post-4154682)
 * > The problem becomes that the users can be revoked by other admins, and if new
   > users come on, they are not supported.
 * Yeah, for that you’d want to research a good network wide membership management
   plugin.
 * Other than that idea, maybe you can check and see if a user is a member of any
   site and, if NOT, redirect them somewhere special.
 * There shouldn’t be any ‘new users’ without being created by a site-admin, so 
   to that end a new user ALWAYS has a site and, if I understand it right, is supported
   in your scenario.

Viewing 5 replies - 1 through 5 (of 5 total)

The topic ‘Multisite employee admin recommendations’ is closed to new replies.

## Tags

 * [admin](https://wordpress.org/support/topic-tag/admin/)
 * [multisite](https://wordpress.org/support/topic-tag/multisite/)

 * In: [Networking WordPress](https://wordpress.org/support/forum/multisite/)
 * 5 replies
 * 2 participants
 * Last reply from: [Ipstenu (Mika Epstein)](https://wordpress.org/support/users/ipstenu/)
 * Last activity: [12 years, 7 months ago](https://wordpress.org/support/topic/multisite-employee-admin-recommendations/#post-4154682)
 * Status: not resolved

## Topics

### Topics with no replies

### Non-support topics

### Resolved topics

### Unresolved topics

### All topics
