About this plugin
SAM Support Access Manager allows site owners to grant secure, temporary WordPress access to developers, support staff, or contractors without creating permanent administrator accounts.
Instead of providing full admin privileges, the plugin creates a temporary support user with a modified administrator role. This role can be restricted to common maintenance tasks such as plugin updates, content edits, or troubleshooting, while preventing access to sensitive areas like user management or security settings.
Access is granted through a secure one-time login link and automatically expires after a defined period.
During each support session, actions are recorded. When the session ends — either by expiry or manual revocation — the plugin generates a concise summary of changes alongside a full activity log. This helps site owners quickly understand what work was performed.
Typical use cases include:
- granting developers temporary access for bug fixes
- allowing support teams to troubleshoot configuration issues
- supervising contractor maintenance work
- maintaining an audit trail of administrative changes
How support access works
- Generate a temporary access session and choose an expiry duration
- Send the secure one-time login link to the developer or support agent
- A restricted temporary admin user is created when the link is used
- Selected administrative actions are logged during the session
- When access expires or is revoked, a session summary is generated
- Review the summary and full event log in the admin dashboard
Logged activity includes
- plugin installation, activation, update, and deletion
- theme switches and updates
- post and page edits
- WordPress core updates
- selected settings changes
- login and logout events
- file editor usage
Key features
- Temporary support users with restricted administrative capabilities
- Time-limited access with automatic expiry
- Secure one-time login links
- Automatic plain-language session summaries
- Detailed chronological activity logs
- Instant manual revocation of active sessions
- CSV export of session data
- Automatic cleanup of expired sessions
- Fully self-hosted operation with no external services
Temporary support users cannot access plugin configuration or session logs.