Let someone else into the store

Everyone who works on the store gets their own account. Shared logins remove the one thing the log is for: knowing who did what.

Permissions

Give the smallest set that lets the person do their job. Someone packing parcels needs orders, not settings or payouts.

Permissions can be widened later in a second. Narrowing them after something has gone wrong is a different conversation.

Collaborators

An agency or a freelancer gets a collaborator account rather than a staff one. Same idea, separate list, easier to end.

Invitations

An invitation goes to an email address and is used once. If it is not accepted, cancel it rather than leaving it open.

Never ask anyone for their password, and never log in as someone else to "fix it quickly". If you need their access, change the permissions on your own account.

When someone leaves

Remove the account the same day. Then check anything they connected on your behalf — API tokens, channel connections, apps — and revoke what is no longer needed.

What to check

• The new person can reach what they need, and cannot reach what they do not.
• The activity log shows their name on their actions.
• No account is left belonging to someone who no longer works here.