A User is an access account with corresponding capabilities within the WordPress installation. EachWordPress user has, at the bare minimum, a username, password and email address.
Once a user account is created, that usermay log in using the WordPress Admin (or programmatically) to access WordPress functions and data. WordPress stores the Users in the users table.
Roles and Capabilities
Users are assignedroles, and each role has a set of capabilities.
You can create newroles with their own set of capabilities. Custom capabilities canalso be created and assigned to existing roles or new roles.
In WordPress, developers can take advantage of user roles to limit the set of actions an account can perform.
The Principle of Least Privileges
WordPress adheres to the principal of least privileges, the practice of giving a user only theprivileges thatare essential for performing the desired work. You should follow this lead when possible by creating roles where appropriate and checking capabilities before performing sensitive tasks.
![[Code is Poetry]](https://s.w.org/style/images/code-is-poetry-for-dark-bg.svg){kind=link}