Answers.Body: <p>After having tested all the possibilities by checking and unchecking all the options marked in the WordPress Access Control pane, I found that the box "CiviCRM: access CiviCRM backend and API" must be be ticked. Otherwise you dont have access to CiviCRM. Strange because it is told to give this to trusted roles only. The well done documentation is unfortunately lacking on this subject.</p>
  
Answers.ContentLicense: CC BY-SA 4.0
Answers.CreationDate: 2019-09-22T10:55:18.653Z
Answers.Text: I wouldn't normally recommend giving subscribers this level of access to CiviCRM. What do you want subscribers to be be able to do on your site? You can find the documentation here: https://docs.civicrm.org/user/en/latest/initial-set-up/permissions-and-access-control/
Answers.UserDisplayName: William Mortada
Answers.ContentLicense: CC BY-SA 4.0
Answers.CreationDate: 2019-09-23T09:37:28.917Z
Answers.Text: The subscriber should be able to do what a "normal user" can do in a NP organisation : create, modify, delete and use contacts.
Answers.UserDisplayName: Patrick
Answers.ContentLicense: CC BY-SA 4.0
Answers.CreationDate: 2019-09-23T10:06:54.083Z
Answers.Text: The 'subscriber' role in WordPress is typically used to allow people to sign up to receive information from a website. It doesn't normally give them permission to access any admin functions or the WordPress dashboard. Perhaps you are using this role in a different way but it sounds like an unusual set up. As it says in the manual the permission to access the CiviCRM back end should only be given to trusted roles and I wouldn't recommend giving it to anyone outside the staff team.
Answers.UserDisplayName: William Mortada
Answers.ContentLicense: CC BY-SA 4.0
Answers.CreationDate: 2019-09-23T10:10:55.187Z
Answers.Text: If you are using the role for staff I would be inclined to use one of the other WordPress roles that typically have greater access such as 'administrator' or 'editor'. Alternatively you could create a new role for this purpose. This page that explains roles and permissions may help: https://wordpress.org/support/article/roles-and-capabilities/
Answers.UserDisplayName: William Mortada
Answers.ContentLicense: CC BY-SA 4.0
Answers.CreationDate: 2019-09-23T15:13:03.597Z
Answers.Text: Thank you William, I fully understand what you mean, but... this doesn't explain why I need to give the " "CiviCRM: access CiviCRM backend and API" to see CiviCRM menu. The problem will be the same with all other roles... According me, this is a weakness in the security of CiviCRM under WP.
Answers.UserDisplayName: Patrick
Answers.ContentLicense: CC BY-SA 4.0
Answers.CreationDate: 2019-09-23T15:22:51.590Z
Answers.Text: I'm still not entirely clear what you are trying to achieve I'm afraid. Typically only staff would have access to the CiviCRM back-end and the menu. Visitors to the site wouldn't have any access to either.
Answers.UserDisplayName: William Mortada
Answers.ContentLicense: CC BY-SA 4.0
Answers.CreationDate: 2019-09-24T14:17:23.300Z
Answers.Text: We are using WP just for CiviCRM, no other need. So anonymous visitors do not have access to CiviCRM. Only connected users have access to CiviCRM to edit contacts. WP's Subscriber role seemed to be the best option for this. If you have another solution....
Answers.UserDisplayName: Patrick
Answers.ContentLicense: CC BY-SA 4.0
Answers.CreationDate: 2019-09-25T09:14:43.093Z
Answers.Text: In some sense it doesn't really matter which role you use as long as you set up the permissions correctly to give people the right level of access. However, it can be confusing for people if you go against convention and use a role for a purpose that it isn't really intended. For that reason I would suggest giving staff the 'administrator' or 'editor' roles or perhaps create a new role specifically for this purpose.
Answers.UserDisplayName: William Mortada
Answers.ContentLicense: CC BY-SA 4.0
Answers.CreationDate: 2019-09-25T12:40:54.660Z
Answers.Text: Ok, thanks again William
Answers.UserDisplayName: Patrick
Answers.ContentLicense: CC BY-SA 4.0
Answers.CreationDate: 2019-09-20T14:47:00.057Z
Answers.LastActivityDate: 2019-09-20T14:47:00.057Z
Answers.UserDisplayName: Patrick
Body: <p>Users connected with the "subscriber" role in WordPress do not see CiviCRM nor access to it (404 error). It works well with WP admin role.
  I believe I have configured correctly the permissions in Administer -> Users &amp; Permissions -> WordPress Access Control.
  Any ideas? Many thanks</p>
  
Comments.ContentLicense: CC BY-SA 4.0
Comments.CreationDate: 2019-08-09T10:48:45.693Z
Comments.Text: Can you check if the url doesn't have wp-admin/admin.php?
Comments.UserDisplayName: Pradeep Nayak
Comments.ContentLicense: CC BY-SA 4.0
Comments.CreationDate: 2019-08-09T16:20:28.157Z
Comments.Text: What version of CiviCRM are you using? And did it work until you did an update?
Comments.UserDisplayName: Jon G - Megaphone Tech
Comments.ContentLicense: CC BY-SA 4.0
Comments.CreationDate: 2019-08-09T16:24:40.410Z
Comments.Text: Also, you said "I believe I have configured correctly the permissions" - can you please edit your question to tell us (and/or use a screenshot) to show us the permissions?
Comments.UserDisplayName: Jon G - Megaphone Tech
Comments.ContentLicense: CC BY-SA 4.0
Comments.CreationDate: 2019-08-12T16:07:21.810Z
Comments.Text: @ Pradeep: as told in my question, admin role can access CiviCRM so admin.php is there
  @ Jon: I use version Version 5.14.1, first version installed (I will update it on the next days)
  I have configured correctly the permissions in Administer -> Users & Permissions -> WordPress Access Control as you can see:
  ![Valid XHTML](https://1drv.ms/u/s!AmCl9YqYon-ngyqJJ0FTVgvIEAqU?e=621ahu).
Comments.UserDisplayName: Patrick
Comments.ContentLicense: CC BY-SA 4.0
Comments.CreationDate: 2019-09-22T10:56:02.117Z
Comments.Text: Could you clarify what level of access you want subscribers to have? This isn't clear from your question.
Comments.UserDisplayName: William Mortada
Comments.ContentLicense: CC BY-SA 4.0
Comments.CreationDate: 2019-09-23T09:38:24.323Z
Comments.Text: The subscriber should be able to do what a "normal user" can do in a NP organisation : create, modify, delete and use contacts.
Comments.UserDisplayName: Patrick
Tags: <wordpress><configuration><roles>
Title: Users with Subscriber role in Wordpress cannot see & access CiviCRM
ThreadText: # Users with Subscriber role in Wordpress cannot see & access CiviCRM
  
  (Asked by: username_0 on 2019-08-09)
  
  Users connected with the "subscriber" role in WordPress do not see CiviCRM nor access to it (404 error). It works well with WP admin role.
  I believe I have configured correctly the permissions in Administer -> Users & Permissions -> WordPress Access Control.
  Any ideas? Many thanks
  
  **Tags:** wordpress, configuration, roles
  
  > **Comments:**
  > **username_1**: Can you check if the url doesn't have wp-admin/admin.php?  
  > **username_2**: What version of CiviCRM are you using? And did it work until you did an update?  
  > **username_2**: Also, you said "I believe I have configured correctly the permissions" - can you please edit your question to tell us (and/or use a screenshot) to show us the permissions?  
  > **username_0**: @ Pradeep: as told in my question, admin role can access CiviCRM so admin.php is there @ Jon: I use version Version 5.14.1, first version installed (I will update it on the next days) I have configured correctly the permissions in Administer -> Users & Permissions -> WordPress Access Control as you can see: ![Valid XHTML](https://1drv.ms/u/s!AmCl9YqYon-ngyqJJ0FTVgvIEAqU?e=621ahu).  
  > **username_3**: Could you clarify what level of access you want subscribers to have? This isn't clear from your question.  
  > **username_0**: The subscriber should be able to do what a "normal user" can do in a NP organisation : create, modify, delete and use contacts.  
  
  ---
  
  ## 1 answers
  
  ### Answer by username_0 on 2019-09-20. Score: 1 | Accepted answer
  
  After having tested all the possibilities by checking and unchecking all the options marked in the WordPress Access Control pane, I found that the box "CiviCRM: access CiviCRM backend and API" must be be ticked. Otherwise you dont have access to CiviCRM. Strange because it is told to give this to trusted roles only. The well done documentation is unfortunately lacking on this subject.
  
  > **Comments:**
  > **username_3**: I wouldn't normally recommend giving subscribers this level of access to CiviCRM. What do you want subscribers to be be able to do on your site? You can find the documentation here: https://docs.civicrm.org/user/en/latest/initial-set-up/permissions-and-access-control/  
  > **username_0**: The subscriber should be able to do what a "normal user" can do in a NP organisation : create, modify, delete and use contacts.  
  > **username_3**: The 'subscriber' role in WordPress is typically used to allow people to sign up to receive information from a website. It doesn't normally give them permission to access any admin functions or the WordPress dashboard. Perhaps you are using this role in a different way but it sounds like an unusual set up. As it says in the manual the permission to access the CiviCRM back end should only be given to trusted roles and I wouldn't recommend giving it to anyone outside the staff team.  
  > **username_3**: If you are using the role for staff I would be inclined to use one of the other WordPress roles that typically have greater access such as 'administrator' or 'editor'. Alternatively you could create a new role for this purpose. This page that explains roles and permissions may help: https://wordpress.org/support/article/roles-and-capabilities/  
  > **username_0**: Thank you William, I fully understand what you mean, but... this doesn't explain why I need to give the " "CiviCRM: access CiviCRM backend and API" to see CiviCRM menu. The problem will be the same with all other roles... According me, this is a weakness in the security of CiviCRM under WP.  
  > **username_3**: I'm still not entirely clear what you are trying to achieve I'm afraid. Typically only staff would have access to the CiviCRM back-end and the menu. Visitors to the site wouldn't have any access to either.  
  > **username_0**: We are using WP just for CiviCRM, no other need. So anonymous visitors do not have access to CiviCRM. Only connected users have access to CiviCRM to edit contacts. WP's Subscriber role seemed to be the best option for this. If you have another solution....  
  > **username_3**: In some sense it doesn't really matter which role you use as long as you set up the permissions correctly to give people the right level of access. However, it can be confusing for people if you go against convention and use a role for a purpose that it isn't really intended. For that reason I would suggest giving staff the 'administrator' or 'editor' roles or perhaps create a new role specifically for this purpose.  
  > **username_0**: Ok, thanks again William  
  
  ---
  
  