All access guides

Shopify · Agency access

How to Give an Agency Access to Your Shopify Store

Riya Arora, Co-founder of AutoStackUpdated June 2026

Agencies usually access Shopify as collaborators (recommended) or as staff. Collaborator access is requested by the agency and approved by you, with granular permissions, and it doesn't count against your staff limit or expose your password.

Step by step

  1. 1

    Open Users and permissions in Shopify admin

    In your Shopify admin, go to Settings, then Users and permissions.

  2. 2

    Find the Collaborators section

    Scroll to Collaborators. You can require a collaborator request code so only invited agencies can request access.

  3. 3

    Approve the agency's collaborator request

    When the agency sends a collaborator request from their Shopify Partner account, review it under Collaborators and approve it.

  4. 4

    Set the permissions

    Choose whether they get full access or only specific sections (for example, Online Store and Marketing), then save.

Choosing the right access level

You can scope access to specific areas: Orders, Products, Online Store, Marketing, Discounts, Apps, Settings, and more. Grant only the sections the agency needs.

Doing this for every platform, on every client?

That's the chase AutoStack ends. One branded link requests access to Shopify and the rest of your stack at the right permission level, tracked as state, with no password emails.

See how AutoStack collects access in one link

Frequently asked questions

Collaborator access or staff access for an agency?

Collaborator access is best for agencies: it's requested and approved, scoped by permission, and doesn't use a staff seat. Staff access is for your own team.

Do I share my Shopify password?

No. Collaborators sign in with their own Shopify Partner account. You approve the request and set permissions; your login stays private.

How do I remove a Shopify collaborator?

In Settings, Users and permissions, open the collaborator and remove their access. It ends immediately.

More access guides

Stop chasing logins

See how AutoStack collects every account access through one branded link, before kickoff, not during it.