Limited Admin Menu Access by URLs
Limited Admin Menu Access by URLs is built for site owners and administrators who need to give support agents, clients, or junior staff a tightly controlled window into the WordPress admin — without handing over full access. The typical use case: you have a support agent who needs to handle WooComme
Limited Admin Menu Access by URLs is built for site owners and administrators who need to give support agents, clients, or junior staff a tightly controlled window into the WordPress admin — without handing over full access.
The typical use case: you have a support agent who needs to handle WooCommerce orders, or a client who should only see their own content settings, or a developer you want to restrict to specific tools. Instead of creating a custom role from scratch, you simply select the user and click the pages they are allowed to visit. The plugin hides everything else from their sidebar and blocks any attempt to navigate to restricted pages directly by URL.
Key Features
- User Targeting — Select one or more users from a searchable, filterable list. Filter by role (Administrator, Editor, Author, Subscriber) with live AJAX search by name or email.
- Visual Link Picker — Hold CTRL (or CMD on Mac) to activate an interactive overlay on the admin sidebar. Click any link to instantly add it to the allowlist. Added links are highlighted green; click again to remove.
- URL + Title Tags — Allowed URLs are stored with their menu title for a human-readable allowlist display and a friendlier Access Denied page.
- Menu Hiding — All admin sidebar menu items not in the allowlist are automatically hidden for targeted users.
- Hard URL Blocking — Direct navigation to a blocked URL is intercepted at admin_init and returns a styled 403 Access Denied page — even if the user tries to type the URL directly into the address bar.
- Access Denied Page — A professional full-page block screen lists all pages the user is allowed to visit, with titles and URLs as clickable links.
- Empty Dashboard Option — A single checkbox removes all dashboard widgets for restricted users, leaving a clean empty dashboard while keeping the page itself accessible.
- Plugin Self-Protection — When a restricted user is granted access to the Plugins page, the Deactivate and Settings action links for this plugin are automatically removed from their view. A server-side guard additionally intercepts and blocks any direct deactivation request, even if crafted manually, ensuring the plugin cannot be disabled by a restricted user.
