Scope · owner · cost drift
Drift alerts fire when scopes, owners, or costs change — not only when you open a one-time app list
Staff Access Audit Guard (Shopify App Store) reviews installed app access, granted scopes, staff access records, and ownership evidence without reading customer or order data. Apps request scopes — including AI and agentic apps. The app classifies each granted scope, flags protected customer-data and broad-write access, and scores your store Low to High (higher is safer). Staff and collaborator reviews get overdue flags; drift alerts fire when scopes, owners, or costs change. Manual app-cost tracking flags duplicate paid categories. This page is not legal advice.
Related: Agentic Catalog by momiji — Crawler rules and complete product JSON-LD for shopping agents.
Free check first: App access scope reader runs in your browser and sends nothing. Paste an app's access scopes and see which touch customer data or can write.
A snapshot list is not the same job as drift after install
Shopify’s admin shows which apps are installed today. Drift answers what changed after that: new or wider scopes, a different install owner, or cost moves — including duplicate paid categories you track manually — without opening customer or order records.
Install Staff Access Audit Guard
How to watch scope, owner, and cost drift
- Run the first audit on install and score the store Low to High (higher is safer).
- Classify granted scopes and flag protected customer-data and broad-write access.
- Keep ownership evidence so owner changes are visible.
- Treat drift alerts on scope, owner, or cost changes — and flag duplicate paid categories in manual app-cost tracking.
Install Staff Access Audit Guard
Not the same as scope classification, ownership evidence, or 30/90 reminders
- App scopes / customer-data flags — classify granted scopes once. See audit app scopes for customer data.
- Ownership evidence — who owns each install. See ownership evidence.
- 30/90-day review reminders — staff/collaborator review cadence. See 30/90-day review reminders.
- Permission drift on staff — leftover Admin access. See staff access audit.
Install Staff Access Audit Guard
What this page is not
- Not a reader of customer or order payloads.
- Not Shopify’s user management activity log for who edited a role.
- Not a substitute for the scopes, ownership, or reminders siblings.
Install Staff Access Audit Guard
Related pages
- Audit Shopify app scopes for customer data
- Shopify app ownership evidence
- 30/90-day review reminders
- Staff Access Audit Guard
Not legal advice. Confirm your counsel before you treat a drift flag as a legal finding.