Managing who can access and edit your Wix site is crucial for security and collaboration. This guide covers Wix's user management system, including contributors (site editors) and site members (customers/users).
Two Types of Users in Wix
1. Contributors (Site Team)
People who can edit and manage your Wix site.
Access includes:
- Wix Editor/Studio access
- Dashboard management
- Content editing
- App configuration
- Analytics viewing
- Billing (depending on role)
Used for:
- Team members
- Designers/developers
- Agencies
- Marketing staff
- Store managers
2. Site Members (End Users)
People who register on your site as customers or community members.
Access includes:
- Member area login
- Profile management
- Subscription content
- Community forums
- Member-only pages
Used for:
- Customers
- Newsletter subscribers
- Community members
- Course students
- Premium content users
This Guide Focuses On: Contributors
This documentation covers contributor management (site team access).
For site member management (customer accounts), see Wix Members documentation.
Wix Site Access Levels
Organization-Level vs Site-Level Access
Wix Organization:
- Container for multiple sites
- Shared billing
- Centralized user management
Individual Site:
- Single website
- Site-specific permissions
- Can be part of organization or standalone
Permission Scopes
| Scope | Description | Use Case |
|---|---|---|
| Organization Owner | Full access to all organization sites | Business owner, primary account |
| Site Owner | Full control over one site | Client sites, individual projects |
| Admin | Site management, limited billing | Site managers |
| Contributor | Content editing, no settings | Writers, designers |
| Viewer | Read-only analytics | Stakeholders, reports-only |
Common Access Scenarios
1. Small Business / Solo Site Owner
Setup:
- One Owner (you)
- Optional: 1-2 Contributors for content updates
- No organization structure needed
Best practice:
- Keep Owner access limited
- Use Contributor roles for most team members
2. Agency Managing Client Sites
Setup:
- Organization with multiple client sites
- Agency team has access across sites
- Clients have limited access to their own site
Best practice:
- Create organization for agency
- Add client sites to organization
- Grant clients site-specific Contributor access
- Retain organization ownership
3. Enterprise / Multi-Site Business
Setup:
- Organization structure
- Multiple sites (regional, brand, etc.)
- Team members with varying access levels
Best practice:
- Use organization for centralized billing
- Assign role-based access
- Regular access audits
- Document who has access to what
4. Client Handoff
Setup:
- Transfer site ownership to client
- Retain access for support (optional)
Best practice:
- Transfer ownership properly (see below)
- Client creates their own Wix account
- Remove agency access after handoff (or keep as Contributor)
Wix User Management Locations
Where to Manage Contributors
For individual sites:
- Wix Dashboard → Settings
- Roles & Permissions
- Contributors tab
For organizations:
- Wix Account Dashboard
- Organization Settings
- Team section
Where to Manage Site Members
- Wix Dashboard → Members
- Or: Community → Members
Note: This is separate from contributor management.
Key Concepts
1. Roles vs Permissions
Role: Predefined set of permissions
- Owner, Admin, Contributor, etc.
Permissions: Individual capabilities
- Edit pages, manage apps, view analytics, etc.
Wix uses role-based access control (RBAC) - you assign roles, not individual permissions.
2. Invitations
Contributors must be invited via email:
- You send invitation from Wix Dashboard
- They receive email
- They accept and create/use Wix account
- They get access to site
Important: Invitee must have or create a Wix account (free).
3. Site vs Dashboard Access
Site access: Can edit site in Wix Editor/Studio
Dashboard access: Can view analytics, manage apps, settings
Most contributor roles have both, but can be restricted.
4. Pending vs Active Contributors
Pending: Invitation sent, not yet accepted
Active: Invitation accepted, actively has access
Regular audits should remove stale pending invitations.
Access Control Best Practices
1. Principle of Least Privilege
Give users the minimum access needed to do their job.
Example:
- Content writer → Contributor (not Admin)
- Marketing analyst → Viewer (not Contributor)
- Developer → Admin (for app management)
2. Regular Access Reviews
Monthly: Review active contributors Quarterly: Full access audit On offboarding: Remove access immediately
3. Separate Personal and Work Accounts
Don't use personal Wix account for client sites.
Better:
- Agency has organization account
- Individuals use work email for site access
- Clean handoff when employee leaves
4. Document Access
Maintain a spreadsheet:
| User | Role | Sites | Added | Review Date | |
|---|---|---|---|---|---|
| John | john@agency.com | Admin | Client A | 2024-01-15 | 2024-07-15 |
| Mary | mary@agency.com | Contributor | Client B | 2024-02-01 | 2024-08-01 |
Common Issues & Solutions
Issue: Can't Remove Contributor
Cause: May be Owner or only Admin
Solution:
- Owner cannot be removed (must transfer ownership)
- Add another Admin before removing last Admin
Issue: Invitation Not Received
Cause: Spam folder, wrong email
Solution:
- Check spam/junk folder
- Resend invitation
- Verify email address spelling
- Use different email if persistent
Issue: User Has Wrong Permissions
Cause: Incorrect role assigned
Solution:
- Edit user role in Settings → Roles & Permissions
- Or remove and re-invite with correct role
Issue: Former Employee Still Has Access
Cause: Access not revoked on offboarding
Solution:
- Immediately remove from all sites
- Review all organization sites for access
- Rotate API keys if they had access
Security Considerations
1. Two-Factor Authentication (2FA)
Require 2FA for sensitive roles:
- Organization Owners
- Site Owners
- Anyone with billing access
Enable:
- Wix Account Settings → Security
- Enable Two-Factor Authentication
2. SSO (Single Sign-On)
Available on Enterprise plans.
Benefits:
- Centralized access control
- Automatic deprovisioning
- Better security
3. IP Allowlisting
Not available natively in Wix.
Workaround:
- Use VPN for team access
- Monitor access logs
4. API Access & Tokens
Secure API keys and tokens:
- Store in password manager
- Rotate regularly (quarterly minimum)
- Separate keys per environment
- Revoke on employee offboarding
Wix Plan Considerations
| Feature | Available On |
|---|---|
| Add contributors | All plans |
| Number of contributors | Varies by plan |
| Organization structure | Business/Premium+ |
| Custom roles | Enterprise only |
| SSO | Enterprise only |
| Advanced permissions | Enterprise only |
Check your plan: Dashboard → Upgrade
Next Steps
Quick Reference
Add a Contributor
- Dashboard → Settings → Roles & Permissions
- Contributors tab → Invite
- Enter email, select role
- Send invitation
Remove a Contributor
- Dashboard → Settings → Roles & Permissions
- Find user → Click options (...)
- Remove access
- Confirm
Transfer Site Ownership
- Dashboard → Settings → Roles & Permissions
- Transfer Ownership
- Enter new owner email
- Confirm transfer
Review Active Access
- Dashboard → Settings → Roles & Permissions
- View all contributors
- Check roles and permissions
- Remove unnecessary access