Skip to content
Agency Pilot

Integrations · Commerce

Get collaborator access to a client's Shopify store

Guided step for the client

Agencies get into a Shopify store as collaborators — a separate kind of account that doesn't use one of the store's staff seats. The client signs in on the link and sends you their collaborator request code; you request access from your Shopify Partner account and they approve it.

Shopify at a glance

How access is granted
Guided. The client shares their collaborator request code; you request access from your Partner Dashboard; they approve.
Access you request
You pick the permissions in your request; the store owner approves or edits them.
What you need
A free Shopify Partner account.
Staff seats
Collaborator accounts don't count toward the store's staff limit.

What your client does

On the onboarding link you send. No password is ever asked for or shared.

  1. 1

    Signs in with Shopify on the link so the store is identified.

  2. 2

    Opens Settings → Users → Security in Shopify admin and copies the collaborator request code.

  3. 3

    Pastes it into the link, which sends it to you.

  4. 4

    Approves your request when it arrives in Settings → Users.

The Shopify steps

  1. 1

    Store owner: Settings → Users → Security, find Collaborators and copy the 4-digit request code (or allow anyone to send a request).

  2. 2

    Agency: in the Shopify Partner Dashboard, go to Stores, click Add store, choose Request access and enter the store URL and code.

  3. 3

    Agency: choose the permissions you need and send the request.

  4. 4

    Store owner: approve it under Settings → Users.

Removing access later

  1. 1

    Shopify admin → Settings → Users → Collaborators → the agency → Remove collaborator.

Shopify: common questions

Collaborator or staff account?
Collaborator. It's designed for agencies, doesn't use a staff seat, and the owner controls exactly which sections you can reach.
Does Agency Pilot read orders or products?
No. The Shopify step exists to get you access; nothing from the store is imported.

Get Shopify access without chasing logins

One onboarding link covers every platform your client uses. Start a free trial and send your first link today.

Plan Shopify collaborator access around the delivery work

An access request is easiest to approve when the client understands the work it enables. For Shopify, start with the client’s Shopify store, confirmed by its store URL. Write down the first task your team will perform and the person responsible for it. A reporting review, a configuration change and ongoing management can require different permissions. Put that purpose in the onboarding brief before sending the link, so the client has a concrete reason to approve the request and knows who to contact if something is unclear.

The intended recipient is the agency’s Shopify Partner account submitting the collaborator request. Check that identity with the person who will actually do the work. An account name alone can be ambiguous when an agency has several teams or the client has several businesses. Record the intended asset and recipient together. This small preparation step makes a later missing-access question much easier to resolve because both parties can compare what was requested with what was granted. It also helps the next account manager understand why the connection exists.

A practical Shopify handover example

Illustrative example: A store-design agency could ask for the permissions needed to work on the storefront while a separate ecommerce team manages products. Agree which theme or environment the agency should work in, how changes are reviewed and who approves publication. Collaborator approval establishes access, not approval of a redesign.

For the redesign example, record the store URL, the collaborator request, the approved permission areas and the agency’s successful Partner-account check. Keep code received, request submitted and client approval as separate milestones. Name the person who controls product data and the person who approves storefront publication. If the agency lacks a necessary area after approval, discuss that specific permission instead of submitting an unrestricted request. This gives the design team a clear boundary for its work while the merchant retains control of the store.

Separate account access from a successful implementation

Receiving a collaborator request code does not grant store access by itself. The code, agency request and client approval are separate milestones, and access does not authorize publishing unapproved changes.

After access is available, agree a small, observable first task in Shopify. For a review engagement, that might be opening the expected account information and documenting what will be assessed. For implementation work, it might be locating the intended setting without changing it yet. Do not test a permission by making an unnecessary live change. If a real change is required, use the client’s agreed approval process and record what you changed, why it was needed and how the result will be checked.

Keep the Shopify connection useful after onboarding

Document the requested permission areas alongside the scope of work. Before a handover, list unfinished storefront tasks and any separate Merchant Center or advertising permissions acquired for the project.

Revisit the access arrangement when the scope changes, the client adds another business asset or the delivery team changes. Ask whether the existing permission still matches the work and whether someone who no longer serves the client still has access. Keep the review proportionate: a small one-off project may need only a clear closing check, while ongoing management benefits from a repeatable review point. The useful outcome is a current record of who can do what on the intended Shopify asset, with the business owner able to understand that record.

Create a clear escalation note when access is blocked

When a Shopify collaborator request is blocked, identify whether the agency lacks the current request code, has not submitted the Partner request, is awaiting owner approval or has received fewer permissions than the agreed work requires. Record the store URL and the relevant stage without including passwords or private account credentials. A redacted view of the requested and approved permission areas may help the owner understand a specific mismatch. Do not ask the client to approve a second broad request before checking the status of the first one.

Assign the next action to the person who can complete it: the owner supplies or reviews the code and approval, while the agency submits and verifies the Partner request. After access works, name the store area the design or ecommerce team can actually use. A collaborator invitation should not be marked as a storefront release, product import or advertising connection. Keeping the support note focused on the request stage lets the merchant resolve access without unintentionally approving unrelated store changes.

Frequently asked questions

What should I confirm before requesting Shopify access?

Confirm the client’s Shopify store, confirmed by its store URL. Ask the client to identify the account they actually use for the work in scope, rather than choosing from a familiar-looking name. Also agree whether the immediate objective is assessment, configuration or ongoing delivery. These details determine which permission is reasonable and what your team will check afterward. If the client is unsure which asset belongs to the project, resolve that ownership or account-selection question before they approve access to an unrelated account.

Who should complete the client side of the request?

The request needs the store owner or authorized store administrator who can review the collaborator request. Send the instructions to that person or ask the client to involve them. A staff member who can read a dashboard may still lack permission to invite an agency. Repeating the same request with the same insufficient role will not fix that distinction. The authorized person should review the requested asset, recipient and permission before proceeding, and retain their own independent access after the agency is added.

Which Shopify permission is appropriate for the work?

The agency chooses the permissions in its collaborator request, and the store owner reviews them. Request the store areas needed for the work rather than treating collaborator access as unlimited access. Start by naming the actions the agency must carry out, then match the role to those actions. If the team only needs to inspect Shopify, explain why a viewing role may be sufficient. If a later task requires more authority, make that a deliberate scope decision with the client. Avoid requesting the broadest available role simply to prevent a possible future question; the current engagement should explain the permission being requested.

Is this an automatic grant or a guided client step?

The onboarding step collects the client’s collaborator request code. The agency requests access through its Partner Dashboard, and the client approves or edits that request in Shopify. Read the status in the context of that workflow. An invitation, a client confirmation and usable Shopify access are related milestones, but they do not always happen at the same moment. Assign responsibility for the next step before marking delivery as ready. This prevents an agency teammate from arriving at a scheduled task and discovering that a required acceptance or platform action is still outstanding.

Which agency identity should receive access?

Use the agency’s Shopify Partner account submitting the collaborator request. Verify it before creating or sending the onboarding request, especially when the agency works through more than one account. Ask the actual recipient to confirm the identity they will sign in with. A forwarded email or a similar display name is not reliable proof that the correct account has been added. For a staffing change, arrange the replacement person’s appropriate access and remove obsolete assignments through the relevant platform process.

How do we verify that onboarding is complete?

After the platform action, open the approved store through the agency Partner account and confirm the store URL and available areas before beginning any store changes. Record who performed that check and whether any required work remains blocked. Prefer a harmless viewing check over an unnecessary live edit. If a teammate cannot reach the asset, compare the actual recipient and role with the original request before asking the client to start again. Completion should mean the right person can reach the intended asset with the agreed capability, rather than only that a message or notification was received.

Does connecting Shopify also connect reporting?

The Shopify step coordinates collaborator access only. Agency Pilot does not import the store’s orders or products through this connection. Keep the client’s reporting expectation explicit in the service brief. If a metric is needed for a report, identify its source, date range and definition before promising that it will appear. A successful access step establishes only the capabilities described for this particular integration. It should not be used as evidence that another platform, a separate dataset or an unrelated source of business results has also been connected.

What should we check if the requested account is unavailable?

If the request cannot be completed, confirm the store URL and current collaborator code with the client. If access is limited, compare the approved permissions with the tasks agreed for delivery. Start with account identity and authority because those determine what the client can share. Write down the exact stage where the flow stopped rather than repeatedly recreating the same request. If Shopify shows an account-specific restriction, the appropriate platform administrator may need to resolve it first. Avoid broadening permissions or switching to another asset just to make a completion indicator appear; verify the intended account instead.

Is the collaborator request code enough to enter the store?

No. It enables the agency to make the collaborator request; the store owner still reviews and approves it. Treat code received, request sent and request approved as separate stages. After approval, verify the store and permitted areas through the agency Partner account. This avoids scheduling storefront work while the request is still awaiting the client’s decision.

Does collaborator access consume a staff seat?

The described Shopify collaborator arrangement is separate from a staff account and does not use a store staff seat. It is intended for external work through the agency Partner account. The store owner still reviews the requested permissions. The practical question is which store areas the agency needs, rather than using a collaborator request as a reason to seek unrestricted access.

Will Agency Pilot import store orders after access is approved?

No. The integration described on this page coordinates access and does not import Shopify orders or products. If an engagement needs ecommerce reporting, identify the actual reporting source and its separate setup. A successful collaborator request should not be represented to the client as evidence that order data, product feeds or a revenue dashboard has been connected automatically.

What should a storefront redesign request specify?

Identify the correct store URL, the work the agency will perform, the requested permission areas and the person who approves publication. Agree how the team will review proposed storefront changes before they affect customers. These instructions belong in the project brief; collaborator approval alone does not define them. Also note whether product management remains with the client or another team to avoid overlapping changes.

How should a store owner review excessive requested permissions?

Compare each requested area with the actual agency task and adjust the request before approval where appropriate. If the agency cannot explain why it needs a capability, clarify the scope rather than approving it for convenience. Afterward, verify that the approved arrangement supports the agreed work. A later requirement can be discussed separately without treating the first collaborator request as unlimited permission for future projects.

How do we end access when the engagement finishes?

Remove the collaborator from the Shopify store’s users area and review any separate advertising or website services. Decide the ownership and maintenance of delivered store work separately from access removal. Agree a handover point before removing access that is still needed to finish approved work. Confirm the business retains the people and permissions it needs after the agency leaves. Keep permission removal separate from decisions about delivered work or historical reporting data; those are different questions. Record which Shopify assignments were removed and which, if any, remain for an explicitly agreed support period, with a clear owner for the final review.

What is a sensible next step after verifying Shopify access?

Open the approved store through the agency Partner account and review the exact storefront task. Confirm the area or theme where work should occur and the person who approves publication before making customer-facing changes. If product-feed or advertising work is also required, coordinate Merchant Center or Meta access separately. The first useful delivery outcome is a reviewable store change within the approved permissions, rather than assuming that a collaborator code or approval connected every ecommerce reporting source.