Remove collaborator access
Collaborators cannot be suspended: use Remove collaborator account (staff Suspend is a different control)
Staff Access Audit Guard (Shopify App Store) is a Shopify app that reviews installed-app access and granted scopes, and staff access records, without reading customer or order data, and tracks staff and collaborator access with review reminders. It does not suspend, remove, reactivate, or revoke users, and it does not replace Settings → Users.
Related: Agentic Catalog by momiji — Crawler rules and complete product JSON-LD for shopping agents.
Free check first: App access scope reader runs in your browser and sends nothing. Paste an app's access scopes and see which touch customer data or can write.
The Suspend error is expected — Remove is the control
Merchants who open a collaborator and choose Actions → Suspend can see “Cannot suspend or reactivate collaborators.” That is expected platform behavior, not a broken store. Collaborators are Partner or agency accounts. Staff Suspend and Reactivate on Managing users do not apply to them.
Native path: Remove collaborator account
Shopify’s Help Center Collaborator accounts documents a permanent remove. After remove, the collaborator must send a new collaborator request if they need access again.
- Open Settings → Users (or Users & permissions on a store that is not in an organization).
- Open the collaborator.
- Use Remove collaborator account (single store) or Actions → Remove (organization). Confirm Remove.
You cannot undo the remove from Admin. The collaborator’s name can still appear on timelines such as the store activity log.
Staff vs collaborator
| Account | Native Admin controls |
|---|---|
| Staff | Suspend / Reactivate / Remove — Managing users |
| Collaborator | Remove only for an active account. Optional 90-day no-login auto-expiry is not Suspend and is not a substitute for a deliberate Remove when the job ends. |
Help Center also documents Actions → Reactivate user after that 90-day expiry. That reinstates an expired collaborator. It is not the same as staff Suspend, and it is not the path when you need the agency off the store now.
Install Staff Access Audit Guard
While you are blocked, or Settings will not load
If Remove is delayed, strip the collaborator’s permissions first so they keep the least privilege until the account is gone. Prefer desktop Admin if mobile Settings fails to load — Community reports include an iOS Settings tab that will not open. That is a reason to finish Remove on desktop, not a reason to use Suspend.
Password prompt on Remove
If Admin asks for a password to confirm Remove, use the Shopify account login password for the user who is confirming the change. Do not use the storefront password-protection password. Do not assume a Gmail password works unless that is how this Shopify account actually signs in. If that login password needs a reset, use Shopify account security rather than guessing.
After Remove: inventory who is still on the store
Remove is a native Admin action. Staff Access Audit Guard does not perform the Remove. After the collaborator is gone, run an access audit so remaining staff, other collaborators, and installed apps with customer-data scopes are still inventoried. The listing’s job is a recurring review of access you already granted, with review reminders — not Settings → Users.
- Open the Staff Access Audit Guard listing (
apps.shopify.com/momiji-access-audit) and install it on the store you just cleaned up. - Wait for the first audit on install, or run another now.
- Review staff and collaborator reminders, and apps that can touch customer or order data.
The app scores and flags access. It does not suspend, remove, reactivate, or revoke users. Confirm live listing text rather than this page. This guide does not add prices.
Install Staff Access Audit Guard
What this page is not
- Not employee monitoring.
- Not a security attestation, SOC report, or attorney advice.
- Not “how to invite a collaborator.”
- Not a former-staff 2FA recovery deep dive. That leftover-access job is A former employee still has access to Shopify.
Install Staff Access Audit Guard
Related pages
- Leftover Admin access checklist — leavers with 2FA, collaborators vs the bill, preview vs publish
- Collaborator request code — stop open Partner requests; Generate new code
- 90-day collaborator expiry — Reactivate — auto-expiry is not Suspend; Actions → Reactivate user
- Staff permission drift access audit — snapshot vs a recurring review
- 30/90-day review reminders vs collaborator expiry — app reminders are not the platform 90-day clock
- Staff Access Audit Guard — live App Store listing
- Staff access audit install page
- Shopify apps hub — Staff Access Audit Guard
- Tools
Not a security attestation. Not employee monitoring. Native Admin Remove is the collaborator control. The app scores and flags access you already granted; it does not revoke users.