Services Work About Team Blog Tutorials FAQ 💬 Chat on WhatsApp

Home / Blog / Shopify Collaborator Access Explained: Requesting & Giving Access Easily

ShopifySecurityAgenciesStore ManagementTutorial

Shopify Collaborator Access Explained: Requesting & Giving Access Easily

Whenever an e-commerce brand hires an agency, freelance developer, or SEO consultant, the first operational hurdle is always access management.

Too often, merchants resort to dangerous shortcuts:

  • Sending master admin email and password combinations over WhatsApp or Slack.
  • Adding contractors as standard staff members—which burns through their plan’s limited staff account seats and creates billing overhead.

Shopify solved this completely with Collaborator Accounts. Collaborator accounts allow verified Shopify Partners to access a client’s store without counting against staff limits, with granular permission boundaries, and zero password sharing.

Here is the exact workflow for both agencies requesting access and merchants approving it.


Why Collaborator Accounts are Superior to Staff Accounts

FeatureRegular Staff AccountCollaborator Account
Plan Seat LimitsRestricted (e.g., 2 on Basic, 5 on Shopify)Unlimited (doesn’t count against limit)
Password SecuritySeparate credentials created by merchantPartner uses their own secure SSO & 2FA
RevocationManual deletion requiredOne-click revocation anytime
Partner DashboardDisconnectedCentralized multi-store switcher

Part 1: For Merchants — Securing Your Store with a Collaborator Code

By default, anyone with a Shopify Partner account could technically send a collaborator request if they know your .myshopify.com domain. To prevent spam requests, Shopify provides a Collaborator Request Code.

  1. In your Shopify Admin, go to Settings → Users and permissions.
  2. Scroll down to the Collaborators section.
  3. Select “Only people with a collaborator request code can send a request”.
  4. Shopify will display your unique 4-digit code.
  5. Copy this 4-digit code and share it securely with your hired developer or agency.

(If you select “Anyone can send a request”, the partner does not need a code, but you will still have to manually approve their request before they gain access).


Part 2: For Agencies / Partners — How to Request Access

If you are an agency or freelance engineer:

  1. Log into your Shopify Partner Dashboard (partners.shopify.com).
  2. In the left navigation, click Stores → Add store.
  3. Select Request access to store.
  4. Enter the client’s store URL: clientstore.myshopify.com.
  5. Enter the client’s 4-digit Collaborator Request Code (if enabled).
  6. Under Permissions, select only the areas required for your scope of work:
    • Theme development: Check Themes, Navigation, Pages, and Preferences.
    • Product catalog work: Check Products, Collections, Inventory.
    • Analytics & Marketing: Check Reports, Analytics, Marketing.
    • Never request Financial/Billing or PII customer data permissions unless strictly necessary.
  7. Add a brief personalized note explaining the scope.
  8. Click Save.

Part 3: For Merchants — Reviewing & Approving Access

Once the agency submits the request:

  1. The store owner receives an automated email from Shopify with the subject: “A Shopify Partner requested access to your store”.
  2. Alternatively, log into your admin and navigate to Settings → Users and permissions.
  3. Under Collaborator requests, click the pending partner request.
  4. Review the requested permissions. You can uncheck any permission box you feel is unnecessary.
  5. Click Accept request.

The agency now has direct, authenticated access through their Partner Dashboard.


Best Practices for Enterprise Security

  1. Principle of Least Privilege: Never grant Full permissions to outside consultants unless they are your lead technical director. Never give access to Shopify Payments or Banking payout details.
  2. Periodic Audits: Review Settings → Users and permissions every quarter. If a project concluded months ago, click the collaborator name and hit Delete account immediately.
  3. Mandatory 2FA: Encourage all team members and partners to enable two-factor authentication on their Shopify IDs.

Summary

Shopify’s collaborator workflow takes under 60 seconds to execute, safeguards sensitive financial data, and guarantees your business maintains complete ownership of your digital assets.

Looking for a trusted Shopify Partner to engineer custom themes, perform speed optimization, or manage daily store operations? Connect with Klickspell today.

Technical Blog

Explore more engineering articles

All Articles ↗

Looking for custom
Shopify engineering craft?

Let's build
your store right.

Let's start with a free 30-minute call. No commitment, no templates, no compromises.

Free 30-min call. No commitment. No templates.

Book your free call →

The craft in every click.