The 2026 Drupal Business Survey is open. Your response will help shape the future of the Drupal business ecosystem.You are browsing documentation for an older version of Drupal, which is not supported any longer, and the information may not be correct. See current documentation for Contributed modules
The User Protect module provides editing protection for other user accounts.
Protections can be specific to a user or applied to all users in a role. Specific users can granted bypass permissions to edit other user accounts.
NOTE: User Protect does NOT restrict the user from editing their own account.
User Protect can be configured to allow delegation of user management without loosing control of the site. Root Admin user account and/or admin role can be protected from editing by non-admin users.
When combined with other modules User Protect can provide a tiered user management permission configuration that prevents a user from granting themselves admin role permissions and gaining control of site.
In order to properly use User Protect it is important to understand how the module determines if a specific field is to be protected.
User Protect can be configured to allow a tiered delegation of user management without loosing control of the site.
Drupal is a registered trademark of Dries Buytaert.
