Whenever an e-commerce brand hires an agency, freelance developer, or SEO consultant, the first operational hurdle is always access management.
Too often, merchants resort to dangerous shortcuts:
- Sending master admin email and password combinations over WhatsApp or Slack.
- Adding contractors as standard staff members—which burns through their plan’s limited staff account seats and creates billing overhead.
Shopify solved this completely with Collaborator Accounts. Collaborator accounts allow verified Shopify Partners to access a client’s store without counting against staff limits, with granular permission boundaries, and zero password sharing.
Here is the exact workflow for both agencies requesting access and merchants approving it.
Why Collaborator Accounts are Superior to Staff Accounts
| Feature | Regular Staff Account | Collaborator Account |
|---|---|---|
| Plan Seat Limits | Restricted (e.g., 2 on Basic, 5 on Shopify) | Unlimited (doesn’t count against limit) |
| Password Security | Separate credentials created by merchant | Partner uses their own secure SSO & 2FA |
| Revocation | Manual deletion required | One-click revocation anytime |
| Partner Dashboard | Disconnected | Centralized multi-store switcher |
Part 1: For Merchants — Securing Your Store with a Collaborator Code
By default, anyone with a Shopify Partner account could technically send a collaborator request if they know your .myshopify.com domain. To prevent spam requests, Shopify provides a Collaborator Request Code.
- In your Shopify Admin, go to Settings → Users and permissions.
- Scroll down to the Collaborators section.
- Select “Only people with a collaborator request code can send a request”.
- Shopify will display your unique 4-digit code.
- Copy this 4-digit code and share it securely with your hired developer or agency.
(If you select “Anyone can send a request”, the partner does not need a code, but you will still have to manually approve their request before they gain access).
Part 2: For Agencies / Partners — How to Request Access
If you are an agency or freelance engineer:
- Log into your Shopify Partner Dashboard (partners.shopify.com).
- In the left navigation, click Stores → Add store.
- Select Request access to store.
- Enter the client’s store URL:
clientstore.myshopify.com. - Enter the client’s 4-digit Collaborator Request Code (if enabled).
- Under Permissions, select only the areas required for your scope of work:
- Theme development: Check Themes, Navigation, Pages, and Preferences.
- Product catalog work: Check Products, Collections, Inventory.
- Analytics & Marketing: Check Reports, Analytics, Marketing.
- Never request Financial/Billing or PII customer data permissions unless strictly necessary.
- Add a brief personalized note explaining the scope.
- Click Save.
Part 3: For Merchants — Reviewing & Approving Access
Once the agency submits the request:
- The store owner receives an automated email from Shopify with the subject: “A Shopify Partner requested access to your store”.
- Alternatively, log into your admin and navigate to Settings → Users and permissions.
- Under Collaborator requests, click the pending partner request.
- Review the requested permissions. You can uncheck any permission box you feel is unnecessary.
- Click Accept request.
The agency now has direct, authenticated access through their Partner Dashboard.
Best Practices for Enterprise Security
- Principle of Least Privilege: Never grant Full permissions to outside consultants unless they are your lead technical director. Never give access to Shopify Payments or Banking payout details.
- Periodic Audits: Review Settings → Users and permissions every quarter. If a project concluded months ago, click the collaborator name and hit Delete account immediately.
- Mandatory 2FA: Encourage all team members and partners to enable two-factor authentication on their Shopify IDs.
Summary
Shopify’s collaborator workflow takes under 60 seconds to execute, safeguards sensitive financial data, and guarantees your business maintains complete ownership of your digital assets.
Looking for a trusted Shopify Partner to engineer custom themes, perform speed optimization, or manage daily store operations? Connect with Klickspell today.