WordPress Admin Bar or Dashboard Menus Missing? Fixing "Sorry, You Are Not Allowed to Access This Page"

On this page

1. Which symptom do you have?
2. Admin bar missing on the front end
3. WordPress dashboard menus missing: roles and capabilities
4. Plugins that hide menus, and plugin conflicts
5. "Sorry, you are not allowed to access this page"
6. Broken table prefix after a migration
7. A security plugin hiding or blocking wp-admin
8. When missing menus are a security warning
9. Preventing lock-outs in future
10. A safe fix order
11. Quick check: profile setting, role or plugin?
12. When to get help
13. FAQs

If your WordPress admin bar or dashboard menus are missing, start with the simplest cause: on the front end, check "Show Toolbar when viewing site" in your profile and whether the page is served from cache. In wp-admin, missing menus or the message "Sorry, you are not allowed to access this page" mean your user account has lost a capability, usually because its role changed, a plugin restricts menus, or the database table prefix no longer matches after a migration.

This guide sorts the symptoms, then works through each cause with safe checks. Most fixes take minutes once you know which one you are dealing with.

Which symptom do you have?

Symptom	Most likely cause	First check
Black toolbar missing when viewing the site, wp-admin fine	Profile setting, theme, caching	Users > Profile, Toolbar checkbox
Some menus missing (Plugins, Appearance, Settings)	Role changed, menu-hiding plugin, or file editing disabled	Users > All Users, your role
Only Profile and Dashboard visible	Account is a Subscriber or a custom limited role	Role in the database
"Sorry, you are not allowed to access this page" on every admin screen	Capabilities missing, usually a table prefix mismatch after migration	wp-config.php prefix vs database
wp-admin redirects or shows a 404	Security plugin hiding the login URL	Security plugin settings or folder

Admin bar missing on the front end

The toolbar only shows to logged-in users and only when the theme behaves properly. Check in this order:

1. Profile setting: Users > Profile > "Show Toolbar when viewing site" must be ticked. Each user has their own setting.
2. Caching: if a page cache or CDN serves the logged-out version of the page to you, the toolbar is missing because you are seeing a cached copy. Most caching plugins skip logged-in users by default, but a misconfigured server cache or Cloudflare rule can cache everything. WordPress caching explained covers which layers to look at.
3. Theme: the toolbar is printed by the wp_footer hook. A custom theme whose footer template does not call wp_footer() will never show it. Switch to a default theme briefly on staging to test.
4. Code or plugin: a snippet such as show_admin_bar(false) or a filter on show_admin_bar, often added to hide the bar for customers, can hide it for everyone. Search the child theme's functions.php and any code snippets plugin.

On WooCommerce sites, WooCommerce hides the toolbar for customers on purpose. That is normal for customer accounts, not for administrators.

WordPress dashboard menus missing: roles and capabilities

Every menu in wp-admin is tied to a capability. Administrators have all of them; Editors cannot see Plugins, Appearance or Settings; Authors and Subscribers see even less. If menus vanished, first check your role under Users > All Users, or ask another administrator to check it. WordPress user roles explained lists what each role can do.

Roles can change because:

• Another user edited your account by mistake.
• A membership, LMS or role editor plugin changed role definitions.
• The site was migrated and the role data did not come across correctly.
• Someone with access changed it deliberately, which is a security question.

Some menus also disappear by design. If wp-config.php contains DISALLOW_FILE_EDIT, the theme and plugin file editors are hidden. If it contains DISALLOW_FILE_MODS, you cannot install or update plugins and themes from the dashboard at all. Those are hardening settings, not faults.

This section is about dashboard menus. If it's the menu on your website that is missing or not saving, see how to fix a WordPress menu not showing.

Plugins that hide menus, and plugin conflicts

Admin menu editors, white-label plugins, client dashboard plugins and some page builders let site owners hide menus from certain users. If someone set them up and forgot, menus can be hidden even from administrators. Check the settings of any such plugin, or rename its folder over FTP or the file manager to test.

A plugin that throws a PHP error during admin loading can also stop menus registering. If menus vanished right after an update, test plugins one at a time on staging; plugin conflict troubleshooting shows the method.

"Sorry, you are not allowed to access this page"

This message means WordPress checked your capabilities for that screen and found you do not have them. On a single plugin page, it usually means the plugin was deactivated or its page address changed, so an old bookmark points nowhere. On every admin screen, it means your account has lost its role entirely.

To check your role directly, look in the database (through phpMyAdmin in your hosting panel) at the usermeta table. For your user ID there should be a row named with your table prefix followed by capabilities, for example wp_capabilities, containing "administrator". If that row is missing or empty, WordPress sees you as having no role.

Before editing the database, take a backup. If you cannot log in at all rather than lacking access, start with fixing WordPress login problems.

Broken table prefix after a migration

This is the most common cause of a sudden loss of all admin access after moving host or restoring a backup. WordPress stores roles in option and usermeta keys that include the table prefix. If wp-config.php says the prefix is wp_ but the tables were imported as xyz_, or the tables were renamed for security without updating the keys inside them, your roles stop matching.

• Compare $table_prefix in wp-config.php with the actual table names in the database.
• If the tables were renamed, the keys inside the options table (user_roles) and the usermeta table (capabilities and user_level) must be renamed to the new prefix too.
• Migration plugins usually handle this. Manual SQL imports often do not.

Make these database changes on a backup first, or ask a developer if you are not comfortable with phpMyAdmin.

If the dashboard loads but posts won't save, the same plugins may be blocking the REST API; see fixes for WordPress updating failed.

A security plugin hiding or blocking wp-admin

Security plugins can change the login address, block wp-admin for certain IP addresses or countries, or lock out users after failed attempts. If wp-admin returns a 404 or a block message:

• Check emails from the security plugin for the custom login URL or a lockout notice.
• Try from a different network; an IP block may apply only to your office connection.
• As a last resort, rename the security plugin's folder to disable it, log in, fix the setting and rename it back.

Login hardening is worth keeping once it works; securing the WordPress login covers settings that protect you without locking you out.

When missing menus are a security warning

Take it seriously if you find an administrator account you do not recognise, your own role downgraded without explanation, or new plugins you did not install. Attackers sometimes demote real admins and add their own. Change passwords, review users (see auditing WordPress user accounts), and look at signs a WordPress site has been hacked. If you confirm a compromise, WordPress malware removal covers clean-up and hardening.

Preventing lock-outs in future

A few simple habits make this much less likely to happen again:

• Keep at least two administrator accounts belonging to people you trust, each with its own login, so one can always fix the other.
• Give staff and agencies the lowest role that lets them do their job, and remove accounts when the work ends.
• Record the custom login address and any IP rules set in your security plugin somewhere safe.
• Use a proper migration tool when moving host, and check admin access straight after the move.
• Take regular off-site backups, so a bad role change or database edit can be reversed.

A safe fix order

1. Take a full backup of files and database.
2. Check the profile toolbar setting and test logged in with caching bypassed.
3. Check your role in Users, or in the database if you cannot see Users.
4. Look for menu-hiding plugins and wp-config.php constants.
5. After a migration, compare the table prefix with the role keys.
6. Check security plugin settings and lockouts.
7. Review users and plugins for anything unexpected.

Quick check: profile setting, role or plugin?

1. Open Users > Profile and make sure "Show Toolbar when viewing site" is ticked.
2. Check your role on Users > All Users. An Editor or Author sees fewer menus than an Administrator.
3. If menus are missing for an Administrator, disable plugins with the Health Check & Troubleshooting plugin and check again. Admin menu editors and membership plugins often hide items.

When to get help

Get help when your account has lost its Administrator role and no other admin exists, or when unknown admin users appear. That may be a hack and needs WordPress malware removal. For access and role fixes, see WordPress maintenance and support, or send the details through the contact form.

FAQs

Why are my WordPress admin bar or dashboard menus missing?

For the front-end admin bar: the profile setting, caching or a theme missing wp_footer. For dashboard menus: your role or capabilities changed, a plugin hides menus, or the table prefix stopped matching after a migration.

How do I get my administrator role back?

Ask another administrator to change your role under Users. If there is none, set the capabilities row for your user in the database to administrator, after taking a backup, or ask your developer to do it.

Why does "Sorry, you are not allowed to access this page" appear after migration?

Usually because the database table prefix in wp-config.php does not match the prefix used in the role keys inside the database, so WordPress cannot read your role.

Is it normal that customers do not see the admin bar?

Yes. WooCommerce and many membership plugins hide it for customers and subscribers on purpose. Only staff roles normally need it.

Can a hack remove my admin access?

Yes. Attackers sometimes downgrade real administrators and create hidden accounts. If roles changed without explanation, treat it as a possible compromise and check users, plugins and files.