90-day collaborator expiry
90-day collaborator expiry is not Suspend — use Reactivate (or Remove + new request)
Staff Access Audit Guard (Shopify App Store) is a Shopify app that reviews installed-app access and granted scopes, staff access records, and ownership evidence, without reading customer or order bodies. It does not Reactivate users, rotate Shopify’s 90-day no-login clock, or replace Settings → Users. Confirm live listing text rather than this page. This guide does not add prices.
Related: Agentic Catalog by momiji — Crawler rules and complete product JSON-LD for shopping agents.
Free check first: App access scope reader runs in your browser and sends nothing. Paste an app's access scopes and see which touch customer data or can write.
The 90-day rule is platform expiry, not a Suspend action
Shopify’s Help Center Collaborator accounts documents that if a collaborator has not logged into the store within 90 days, access automatically expires. That is store-security behavior on the platform. It is not staff Suspend, and it is not the same as a merchant choosing Remove collaborator account.
The same Help article’s FAQ (“How do I reactivate an expired collaborator?”) is the restore path. Access Audit Guard’s 30/90-day review reminders are an inventory cadence. They do not expire collaborator access and they do not extend the native 90-day clock.
Native path: Actions → Reactivate user
Help Center wording: reinstate access on the Users and permissions page by opening the user account, then Actions → Reactivate user.
- Open Settings → Users (Users and permissions).
- Open the expired collaborator.
- Choose Actions → Reactivate user.
Do not invent extra Admin clicks. Confirm the live Help article if the Users screen has moved. After Reactivate, the Partner signs in again from their Dev Dashboard or the Shopify mobile app — still with two-step authentication, which Help Center requires for collaborator login.
Install Staff Access Audit Guard
Not the same as Suspend, Remove, or a request-code gate
| Situation | Native control |
|---|---|
| Staff account you want paused | Staff Suspend / Reactivate — Managing users. Collaborators cannot use staff Suspend. That error is the sibling Cannot suspend a Shopify collaborator — remove access instead. |
| Collaborator who did not log in for 90 days | Actions → Reactivate user on the expired collaborator (this page). |
| Agency work ended now | Remove collaborator account. Reactivate is the wrong tool when you want them off the store. |
| New Partner request after Remove, or after Reactivate is not available | Current collaborator request code plus the store’s .myshopify.com URL. The code gates who can ask; it does not restore an expired account by itself. |
If Reactivate fails or the Partner still cannot sign in
Reactivate is a native Users action. If it is missing, errors, or the Partner still cannot log in, the restore is still Admin — not an app:
- The Partner can send a new collaborator request using the store’s
.myshopify.comURL and the current request code — see Collaborator request code. - Strip a leftover staff account that uses the same email before you Approve a new request, so the Partner identity is not colliding with an old staff login.
- If Approve still errors, Shopify Support — do not expect Access Audit Guard to clear the error.
Hygiene after restore or a fresh request
When you Approve, grant the least privilege the job needs. Help Center already tells you to review the auto-generated role and the permissions the Partner asked for. When the relationship ends, use Remove (not expiry) and Generate new code so old Partners cannot re-request. Periodically check who still has access — expiry is not a substitute for that review.
Install Staff Access Audit Guard
After Reactivate or re-approve: audit who still has access
Reactivate, Remove, and a new collaborator request are native Settings → Users work. Staff Access Audit Guard does not reinstate expired collaborators, does not rotate the 90-day clock, and does not replace Users. After Reactivate or a fresh Approve, run an access and scope audit so remaining staff, other collaborators, and installed apps with customer-data scopes are still inventoried. The listing’s job is a recurring review of access you already granted.
- Open the Staff Access Audit Guard listing (
apps.shopify.com/momiji-access-audit) and install it on the store you just restored. - Wait for the first audit on install, or run another now.
- Review staff and collaborator reminders, and apps that can touch customer or order data.
The app scores and flags access. It does not Reactivate, Remove, or extend the 90-day clock. Confirm live listing text rather than this page.
Install Staff Access Audit Guard
What this page is not
- Not a request-code deep dive. That gate is Collaborator request code.
- Not field-level edit logs, employee monitoring, or a security attestation.
- Not legal advice, and not “the app Reactivates expired collaborators.”
- Not the Remove vs staff-Suspend walkthrough. That is Cannot suspend a Shopify collaborator — remove access instead.
Install Staff Access Audit Guard
Related pages
- Cannot suspend a collaborator — remove access instead — staff Suspend vs collaborator Remove
- Collaborator request code — stop open Partner requests; Generate new code
- Staff permission drift access audit — snapshot vs a recurring review
- 30/90-day review reminders vs collaborator expiry — app reminders are not the platform 90-day clock
- Shopify Help Center — Collaborator accounts — 90-day expiry and Reactivate user
- Staff Access Audit Guard — live App Store listing
- Staff access audit install page
- Shopify apps hub — Staff Access Audit Guard
- Tools
Not a security attestation. Not employee monitoring. Native Settings → Users is the Reactivate control. The app scores and flags access you already granted; it does not Reactivate expired collaborators.