Direct answer: centralize access, then grant by task
Ecommerce teams should review Shopify access before an agency, freelancer or internal specialist begins Google Ads work. Do not grant broad store authority merely because someone works in marketing. Define the store-side task, identify the information or action required, choose the narrowest suitable role, record an internal approver and set a condition for reviewing or ending access. This creates a clear boundary between campaign management, store publishing and sensitive retail administration.
Shopify announced that POS and admin users are managed together in Settings > Users. It also says existing users, roles and permissions were migrated so people retained their access, except for the stated handling of broader organization-wide role administration. Migration preserves continuity; it does not prove that every historical permission still reflects a current business need.
Confirmed by Shopify: POS users and their roles can be managed from Settings > Users.
Confirmed by Shopify: seasonal users can be suspended or deactivated and later reactivated with their history.
CreatikLab guidance: approve access against a named task, owner and closure condition.
Do not assume that Shopify access is required for work that can remain inside Google Ads.
