Ecommerce & CMS · Integration
Last updated: August 2026
Shopify collaborator or staff accounts — the agency requests collaborator access, kept separate from the owner login. You'll find it under Settings → Users and permissions → Collaborators. The client keeps ownership of Shopify stores; the agency is granted only what you assign.
Grant the least access the work needs. Here's what each level on Shopify can do:
| Access level / role | What it can do |
|---|---|
| Collaborator | Agency-specific access, separate from staff, with granular per-area permissions and its own login. The right method for agencies. |
| Staff account | An employee-style account with permissions you set. Use for ongoing team members, not external agencies. |
| Store owner | Full control including billing and closing the store. Never share. |
A few minutes. The agency sends a collaborator request; you approve the requested permissions. No password exchanged.
Collaborator accounts are Shopify's official agency access — separate from your logins, with their own permissions and audit trail, and no shared 2FA. Remove the collaborator anytime from Users and permissions.
Every step above is why agencies move to a single link. HandItSafe requests exactly the Shopify access you need — the client approves it through Shopify's own process in about three minutes, no password shared, and keeps a panel to see and remove access anytime. That visibility is why clients approve faster, and it makes offboarding a one-tap job later.
FAQ
Collaborator accounts are Shopify's official agency method — separate access, its own permissions, its own audit trail, and no shared 2FA.
No. The agency requests collaborator access; you approve the specific permissions.
Settings → Users and permissions → remove the collaborator. HandItSafe adds a one-tap client remove.
Collaborator is designed for agencies and developers: separate access, its own login, granular permissions, and it doesn't use a staff seat. Staff accounts suit ongoing internal team members.
No — collaborator accounts don't consume your paid staff seats, so agency access doesn't cost you a seat.
HandItSafe requests exactly this access in one link. No passwords. Your client keeps a panel to remove it anytime.