Capability for generating Application Password

[leedxw]

We've been asked by a client if we can restrict application password generation to a particular user class.

However, my understanding is that application password generation is not governed by a specific capability.

[Ov3rfly]

You can restrict to user role or capability with ​wp_is_application_passwords_available_for_user filter, a code example is available in ​Application Passwords: Integration Guide.

[sabernhardt]

[50114] introduced six fine-grained capabilities after the Integration Guide was published, including create_app_password.