Synthetic teaching example for a website delivery brief. Not a client result, live account test or certification.
A redesign does not automatically require every store permission
When a website supplier asks for Shopify access, the merchant needs a task-based brief rather than a screenshot saying “full access required”. List the work, the requested scope, the approver and the end of the engagement. A collaborator request is not the same as merchant approval, and a role label is not proof that the account belongs to the intended supplier.
| Proposed work | Scope to review | Approval in this example |
|---|---|---|
| Adjust a theme section | Theme editing | Not yet approved |
| Review sample product display | Merchant decides the necessary product access | Not yet approved |
| Configure payments | Outside this brief | Do not include automatically |
Use the filled example
Download the finite Node checker and filled input. Run with Node 24 or newer; no account, API or network is used.
node checks.mjs shopify-collaborator-work-brief shopify-collaborator-work-brief.jsonThe filled JSON deliberately has requesterIdentityVerified false and all task approvals false. It returns identityReviewRequired true, three unapproved tasks and grantPerformed false. This is a discussion worksheet, not a permission grant or an exact mapping to every current Shopify role. Product viewing and editing needs must be distinguished in the actual account.
A controlled supplier handover
First verify the supplier identity through the agreed engagement channel. Have a merchant user with the appropriate authority review the request in Shopify. Demonstrate the intended task using the proposed limited access, then check that unrelated work remains unavailable. Record who approved the scope and when access will be reviewed after delivery; do not send shared passwords or recovery codes.
Shopify’s inactive-collaborator expiry is not a substitute for closing an engagement promptly. Ask the merchant to verify the current account rules, two-factor requirements and role capabilities before making changes. A partner-access mechanism does not establish that a particular supplier is a Shopify Partner or that its work is certified.
This guide creates no account, requests no collaboration and alters no store. It does not claim MadRaven has a particular partner status. It helps a store owner commission appropriately scoped work and retain approval evidence.
Primary facts and limits
Shopify collaborator accounts: Documents merchant-controlled permissions, two-step authentication and expiry after 90 days without login.
Sources reviewed 15 October 2026. The supplied input and acceptance rules are original teaching design; check current platform versions and your actual delivery contract before implementation.
Agree who may open a preview before sharing customer material