What is the install_plugins permission in WordPress?
The install_plugins permission allows you to install plugins on a WordPress site.
However, the install_plugins permission can not be used by itself. Before you can install plugins you also need the activate_plugins permission. With both of those permissions, you can go to the “Plugins” screen and use the “Add New” button.
Strangely, the install_plugins also gives you access the Dashboard > Updates area. You won't see anything useful in this area unless you have the update_plugins permission.
Who has the install_plugins permission?
By default, the delete_plugins permission is only given to Super Admins and Administrators.
Users not in these roles are not allowed to delete plugins.
How can you control who has the install_plugins permission?
You can control who has the install_plugins permission by installing the Capability Manager Enhanced plugin.
- After installing Capability Manager Enhanced, go to Users > Capabilities.
- Check or uncheck the “install plugins” and “activate plugins” boxes in the “Other WordPress Core Capabilities” area: