Skip to content

Delegate a site

Hand a site to a site manager who runs its members, settings and content and reaches no other site.

Before you start

  • Administer roles and permissions, to create the role.
  • Administer sites, or Manage site members on the site, to grant it.

Set up a site manager

  1. At /admin/people/roles, add a role, for example "Site manager".
  2. Grant the role Access the site dashboard, Manage site settings and Manage site members.
  3. Grant it the content permissions the manager needs, including Add content to a site and Remove content from a site. A per-site section opens with its core permission, like Administer menus and menu links for menus (Getting around).
  4. Offer the role on the site: the Assignable roles settings of its site type, or the site's own (Roles and permissions).
  5. On the site's People page, add the manager and tick the role (Members and roles).

Grant this role on sites only. As a platform role it applies on every site.

What the manager does

  • Opens My sites at /admin/sites/my: the sites whose dashboard they may open, or that dashboard directly when there is one.
  • Works on the hub: the admin theme, the navigation, and the content and media overviews, which list their sites' content only. There they edit their site's content with the permissions of their role on it.
  • Changes the site's setting sections and works its launch checklist, enabling a new site included.
  • Adds and removes members and grants the site's roles.

What the manager cannot do

  • Grant an administrator role or a role with a restricted permission. Only Administer roles and permissions in a platform role grants those.
  • Change platform roles or edit user accounts.
  • Open the Identity section: hostname, ID, structure.
  • Create, clone or delete sites; open All sites or Sites configuration.
  • Visit the site's address while it is disabled.
  • Reach any other site.

Run a sub-site with the main site's people

Run by the main site's people in a sub-site's Identity section lets the main site's members and per-site role holders read and edit the sub-site's content on the hub, without a membership on the sub-site. What they may do comes from their platform roles, their roles on the sub-site, and their per-site roles on the main site that both sites offer.

The setting is off by default, and each sub-site sets its own.