A marketing person needs products, discounts, reports and usually apps and sales channels, plus read access to inventory. The inventory part is the one most often missed and it matters commercially: marketing that cannot see stock levels advertises things you cannot ship. The risk here is not the initial grant but accumulation, because internal roles have no end date to force a review.
What this person actually does
Every other role in this cluster has a natural review point. Contractors finish, seasonal staff leave, agencies reach the end of an engagement. An internal marketing person has none, so access only ever moves in one direction.
The accumulation happens through individually reasonable requests. Access to run a campaign, then to fix a product page, then to check an order a customer complained about publicly, then to install an email app. None is unreasonable and the total is rarely revisited.
Inventory read access is worth granting deliberately rather than waiting to be asked. Marketing without stock visibility is the direct cause of ad spend pointing at sold-out products, which is the most expensive routine failure in a small store.
The two layers
Shopify permissions decide what they can do in the admin. The Store Huddle role decides what they see in the workspace. Both are needed, and they are set separately.
| Layer | For this person | Why |
|---|---|---|
| Shopify staff account | Required | Store Huddle runs inside Shopify admin |
| Shopify permissions | Products, discounts, reports, channels | The campaign toolkit |
| Inventory | Read access, deliberately granted | Prevents advertising what you cannot ship |
| Store Huddle role | Staff, or a custom marketing role | Campaign and stock rooms |
| Review | Annually, since nothing forces it | The accumulation risk is specific to internal roles |
Shopify access to grant
Grant the campaign toolkit plus stock visibility, and diary a review. Shopify's permission labels change from time to time, so these are described by what they control rather than quoted as exact checkbox names. Check the current names in your own admin.
- Products, including editing descriptions, images and collections.
- Discounts, with a written policy on depth and on setting usage limits.
- Reports, for campaign performance.
- Sales channels and apps, where they run them.
- Inventory, read access, so campaigns are planned against real stock.
Access to withhold, and why
- Order editing and refunds. Marketing rarely needs to change an order, and a public complaint is better routed to support than resolved directly.
- Payouts and banking. Campaign reporting does not require settlement data.
- Staff management and settings.
- Unlimited discount creation. The limit belongs in writing, not in judgement, and usage limits on codes prevent the expensive version of this going wrong.
Rooms they belong in
Marketing needs the campaign conversation and enough of the stock conversation to plan against reality.
- A marketing or campaign room.
- The stock room, at least read access, so promotions are planned against real cover.
- The launch room during a launch, which is often temporary membership.
- Not finance or management rooms.
- Not the support room by default, unless handling public complaints is part of the job.
Offboarding
This is the role most likely to hold access nobody reviewed, precisely because nothing forces a review. Diary an annual check even when nothing has changed.
On departure, check the connected apps and sales channels as well as the staff account. Marketing roles accumulate third-party integrations, and those often have their own credentials that outlive a Shopify account.
Check scheduled and unpublished campaigns before removing access, or a scheduled discount goes live with nobody owning it.
Common questions
What Shopify access does marketing need?
Products, discounts, reports, and usually sales channels and apps, plus read access to inventory. Order editing, refunds and payouts are not normally required.
Why does marketing need to see stock levels?
So campaigns are planned against real cover. Marketing without stock visibility is the direct cause of advertising spend pointing at products that cannot be bought.
What is the main access risk with an internal role?
Accumulation. Contractors and seasonal staff have an end date that forces a review; internal roles do not, so access only ever widens through individually reasonable requests.
What is missed when a marketing person leaves?
Connected apps and sales channels. Those often hold their own credentials, which survive the removal of a Shopify staff account.