WordPress “Sorry, you are not allowed to access this page” – causes and fixes

The WordPress message “Sorry, you are not allowed to access this page.” usually appears when your account does not have the required permission (capability) – but it can also be caused by security plugins, corrupted updates, or incorrect file permissions.

Step 1 – Confirm you are using an Administrator account

• Try logging out and back in.
• If the site has multiple users, confirm your user role is Administrator (Users → All Users).

Step 2 – Clear browser cache/cookies and try incognito

Sometimes an expired login cookie or cached redirect causes permission-related messages.

Step 3 – Disable security/role plugins (common cause)

Plugins that can cause this message include:

• Security suites (WAF / firewall plugins)
• Role editors / membership plugins
• Admin UI customizers

If you cannot access wp-admin to disable them:

1. Open Plesk File Manager → httpdocs/wp-content/plugins.
2. Rename the suspected plugin folder (for example plugin-name → plugin-name.disabled).
3. Reload wp-admin.

Step 4 – Check for PHP errors

A broken plugin update can trigger permission messages even if your role is correct. Check:

• Plesk → domain → Logs
• wp-content/debug.log (if debug is enabled)

Step 5 – Fix file permissions (hosting level)

Wrong permissions can block admin PHP files. Recommended values:

• Folders: 755
• Files: 644

Step 6 – After a migration: verify URLs and table prefix

• Confirm siteurl and home match your domain (in the database wp_options table).
• Confirm your $table_prefix in wp-config.php matches the tables in the database.

If nothing helps

Restore from a backup made before the issue started, or open a support ticket and include:

• Exact URL you cannot access
• Time when the problem started
• Recent changes (plugin/theme updates, migrations)