Log in
Start free trial

Legacy user management

If your store hasn't been migrated to role-based access control for users, then you can add and manage users in the Users and permissions section of your Shopify admin, and assign store permissions directly to your users.

On this page

Add staff

You can add user accounts to your Shopify store to let staff log in as separate users. To add users, you need to be the store owner or have the Edit permissions and Add and remove staff permissions.

If you want to add staff who can log in to your admin and to Shopify POS to add POS app only staff, then you also need the Manage Point of Sale staff permission and the required Shopify POS permissions. Learn more about adding and managing POS staff.

Steps:

  1. From your Shopify admin, go to Settings > Users and permissions.
  2. Click Add staff.
  3. Enter the staff members's full name as it is displayed on any government-issued ID, and their email address.
  4. Do either of the following:
    • Select which permissions you want to give the staff member.
    • To give the staff member all available permissions, click Select all.
  5. Click Send invite.

The staff member receives an email invitation. Invitations to create a staff login expire in 7 days.

Create staff

After you add a staff member, the staff member needs to accept your invitation to complete the setup of their staff login.

If the staff account invitation isn't accepted within 7 days, then remove and re-add the staff account to resend the invitation.

If your store is on the Shopify Plus plan, then go to Settings > Users, select the staff account, and click Resend Invite.

Steps:

  1. In the invitation email, click Create staff, and then click accept invite.
  2. Optional: To create a Shopify account, enter the following information:
    • email address
    • first name and last name
    • phone number (optional)
    • password
  3. Click Create account.

Give Shopify POS permissions

If you're the store owner or staff with the Edit permissions permission, then you can give existing staff access to your Shopify admin and Point of Sale (POS) app.

Steps:

  1. From your Shopify admin, go to Settings > Users and permissions.
  2. Click the staff member's name.
  3. In the Point of Sale access section, click Access Point of Sale.
  4. From the POS Role list, select the role that you want to assign to the staff member.
  5. Optional: To create a different personal identification number (PIN) from the default PIN, in the PIN section, click Generate random PIN or enter a PIN. Staff use this PIN to access Shopify POS. Make sure that your staff knows what their PINs are.
  6. Click Save.

You can also create and assign roles to your Shopify POS staff. Learn more about managing Point of Sale staff.

Manage staff

Store owners and staff can edit their account details and add a picture to the account when they log in to the Shopify admin with their credentials. You can only edit the details for your own account.

Edit staff permissions

You need to be the store owner or have the Edit permissions permission to edit other staff members' permissions. Which permissions you can edit for other staff members depends on which permissions you have. You might not be able to edit staff permissions in some cases. Learn more about the Edit permissions permission.

Steps:

  1. From your Shopify admin, go to Settings > Users and permissions.
  2. Click the staff member's name.
  3. Do any of the following:
    • Select the permissions that you want to give to the staff member.
    • Clear the permissions that you want to remove.
    • To give the staff member all available permissions, click Select all.
  4. Click Save.

Update staff details

You can always make changes to your own login to update your account details.

Steps:

  1. From your Shopify admin, click your store name in the topbar.

  2. Click Manage account.

  3. Update your account details.

  4. Click Save.

Update staff emails

If you use a Shopify account and you change your email address, then your email address is updated for all the stores that are linked to your Shopify account:

  • If you need to update the email address for existing staff, then add a new staff member and enter the new email address.
  • If you need to update the email address for the store owner, then add a new staff member, and then transfer ownership to them.

Revoke staff device permissions

If an existing staff member uses a device or an application to access your Shopify store, but lose the device, then you can log the staff member out and require them to log in again. This can help prevent unknown users from accessing your store.

Only the store owner or a staff member with the Revoke access tokens for other staff permission can revoke staff device permissions.

Steps:

  1. From your Shopify admin, go to Settings > Users and permissions.
  2. Click the staff member's name.
  3. Click Revoke Access next to the device or application.
  4. Click Revoke to confirm.

Your staff can't access your store using that device without logging in again.

Deactivate or reactivate a staff member's account

You can deactivate a staff member's account so that the staff member can't log in to your store any more. For security purposes, deactivate any unused staff logins. If you deactivate a staff member's account who is a Shopify Credit secondary cardholder with active cards, then their cards are automatically locked and can't be used.

Steps:

  1. From your Shopify admin, go to Settings > Users and permissions.
  2. Click the staff member's name.
  3. Click Suspend access.
  4. Click Suspend.

You can reactivate the staff member's account at anytime by clicking Reactivate. If you reactivate a staff members's account who is a Shopify Credit secondary cardholder with active cards, then their cards are automatically unlocked.

Remove a staff member's account from your store

Store owners and staff with the Add and remove staff permission can a remove a staff member's account from a store. You can't undo this action. If one or more staff members share the account that you want to delete, then create separate staff accounts for your active staff member first.

If you remove a staff member's account who is a Shopify Credit secondary cardholder with active cards, then their cards are automatically canceled and can't be used.

Steps:

  1. From your Shopify admin, go to Settings > Users and permissions.
  2. Click the staff members's name.
  3. To permanently remove the staff from your store, click Remove *staff name*.
  4. Enter the password for your staff account that you're signed into, and then click Remove.

The staff member's account is removed permanently from your store, and is no longer available from your Shopify admin.

View login history

As the store owner or staff with the Edit permissions permission, you can review the login history of any staff member. Staff members can review their individual login histories as well.

You should review staff login histories periodically to verify that there hasn't been access from unknown ISPs, locations, or IP addresses. This could be an indication that the staff member's account has been compromised.

Steps:

  1. From your Shopify admin, go to Settings > Users and permissions.
  2. Click the staff members's name.
  3. In the Recent access to store section, review the five most recent login sessions and the following information about each session:
    • date
    • IP address
    • ISP (internet service provider)
    • the staff member's location at login
    • web browser and operating system version, which you can review by hovering your cursor over the information symbol
Can’t find the answers you’re looking for? We’re here to help.