Manage Moodle Roles Without Granting Unnecessary Administrator Access

Moodle permissions should match the task and its context. Adding someone as a site administrator grants much broader access than assigning a course teacher or a limited management role; it is not the routine way to edit an ordinary user’s permissions.

Choose a role before choosing a person

Determine whether access is needed for one activity, course, category or the whole site. Inspect the roles and capabilities available in your installed Moodle version. Use the narrowest suitable assignment instead of making an account an administrator to solve a single-course problem.

For genuine site-administrator access

1. Use an existing authorized site administrator and open Site administration > Users > Permissions > Site administrators.
2. Confirm the intended person’s account identity and that unrestricted site administration is approved.
3. Select the account, add it and review the confirmation before proceeding. Keep the number of administrators small.
4. Verify the resulting administrator list and retain a reliable existing recovery administrator.

Moodle documents site administrators as having unrestricted site permissions; the administrator role is not an ordinary editable/deletable role. The primary administrator has special removal restrictions. The old Set Main user step is not a general permissions requirement and should not be performed merely to add another administrator.

Change or remove narrower access

For course access, review enrollment and role assignment in that course. For broader delegated management, assess an appropriate Manager role and context. Changing a shared role definition can affect many users, whereas removing one role assignment affects that assignment; review the difference before saving.

Test allowed and denied actions with a controlled account, review other assignments the user holds, and record the approved change. Do not test with real student information or assume a role name alone proves effective permissions.

References: Moodle site administrators; role assignment and contexts.

Reviewed October 15, 2026. Documentation review; no Moodle account, role or student data was accessed or changed.