The two bad options
Agencies working on a Shopify store usually end up choosing between two uncomfortable arrangements. Either the client hands over a staff account with far more access than the work requires, or the agency works blind and reconstructs what happened from a weekly call and a screenshot.
Both are worse than they need to be. The first is a security problem that everyone quietly ignores until offboarding. The second means the agency's advice is always a week stale.
What the agency actually needs
Almost never full admin. In practice the list is short:
- Which products are moving, and which are about to run out, because that determines what they should be spending on.
- The launch calendar, so campaigns line up with stock reality.
- A channel where questions get answered in hours rather than at the next call.
- Enough context on customer issues to know when a campaign is causing them.
Notice what is not on that list: payouts, margins, the customer list, and the ability to change anything on the store.
The scoped-channel arrangement
Give the agency a channel (one per engagement) with a role that hides financial fields. They see stock levels and sell-through, they see the launch calendar, they can ask a question and get an answer with the order or product attached. They cannot see what anything cost you or what you took home.
Set an expiry on the access at the start, matching the contract. This is the part everyone means to do later and nobody does.
Propose it yourself. Asking for less access than the client expected to give you is one of the cheapest trust-building moves available, and it removes the offboarding conversation entirely.
What changes in practice
The weekly status call gets shorter, because the status is already visible. The questions that used to wait for it get asked and answered the same day. And when a campaign needs pausing because stock ran out, the agency finds out at the same moment the client does rather than two hours later.
None of this requires a new tool if your existing setup can do scoped access. Most cannot, which is why the arrangement is rarer than it should be, and it is one of the reasons agency collaboration is a core use case for us rather than an afterthought.