Access & team

Installed PROVEN app

Control who can view and change each Shopify store.

PROVEN confirms the user and Shopify store, then gives them only the features you allowed for that store. Access stays separate between clients.

Access control is available in the installed PROVEN app.

Two access layers

Shopify confirms the user. You control access in PROVEN.

A user can use a feature only when they are confirmed in the correct store and have the required permission in PROVEN.

01

Shopify access

The user must be able to open the correct store with their own Shopify account.

02

PROVEN access

The Owner or an authorized administrator configures the application role, status and permissions.

03

Effective access

A feature becomes available only when both conditions are satisfied for the current store.

How a user gets access

Confirm the user, then grant access.

PROVEN does not grant access just because a user identifier was entered manually.

  1. 01

    Open the correct store

    The user signs in to Shopify Admin and opens the store where PROVEN access is needed.

  2. 02

    Open PROVEN once

    PROVEN can record the verified Shopify identity for the current store even if application access has not yet been granted.

  3. 03

    Configure access

    The Owner or authorized administrator selects the required role, status and permissions.

  4. 04

    Open the app again

    After activation, the user reopens PROVEN and receives only the permitted features.

Roles

Role sets the limit. Permissions decide what the user can actually do.

PROVEN does not assume every team member needs the same features.

Shopify Owner

The owner role comes from Shopify.

PROVEN recognizes the Owner role from the Shopify identity confirmed for the current store; it is not a role that can simply be assigned manually.

Admin

Administers only within the access they were given.

An Admin can receive broader rights and, where allowed, manage access for other members without granting more access than they themselves have.

Member

Access for the required tasks.

A Member receives only the permissions needed for their work and does not automatically gain administrative features.

Granular permissions

Reading can be separated from actions that change the catalog.

The interface groups permissions by work area, and the application checks the required right for the requested action.

Catalog & store

Catalog visibility and store-settings administration can be separated.

Sync & checks

Viewing activity can be separated from the right to start synchronization or checks.

Problems & corrections

Viewing found problems, reviewing, preparing corrections and publishing can require different rights.

Audit & team

Audit history and team-access administration are controlled separately.

When access is missing

If you do not have the required permission, the feature stays unavailable.

The separation is visible in the app: a user may have access to one area while another remains unavailable.

No PROVEN access

The app shows the denied-access state and the guide for obtaining access.

No Settings permission

The store configuration page remains unavailable.

No Audit permission

Audit history is not displayed.

View without correction rights

A problem may be visible while correction data and actions remain unavailable.

Access prepared in advance

Inactive until verified

A manually entered ID is not enough to grant access.

You can prepare access in advance, but it becomes active only after the user opens PROVEN from the correct Shopify store. Access is never confirmed from a typed ID alone.

Store separation

Each store keeps its own access list.

Roles or access held in another Shopify store do not automatically grant PROVEN access in the current store.

  • Identity is verified in the context of the current store.
  • Access is configured separately for each store.
  • Relevant access changes can be followed in audit history.
  • The interface exposes only features the user can use.

Shopify agencies

Operator-assisted rollout

The multi-store agency model is launch-certified for operator-assisted rollout.

The current model organizes access across multiple stores while every client remains separate; assigning a store to an agency does not automatically grant Shopify access or extra rights in that store.

  • The model allows an agency to administer multiple stores; a store has at most one active agency.
  • Members receive explicit roles and permissions limited to the stores they are allowed to administer.
  • Publishing fixes and restoring images require explicit permissions; they are not included automatically in Admin or Operator roles.
  • Suspension or reassignment removes the previous access at the next access check.

Agency access does not change merchant rights and does not automatically grant control over billing. Merchants can see the active relationship in PROVEN, while assignment changes remain a controlled administrative flow.

View the agency model

Documentation

See the access flow step by step.

The guide explains what a team member needs to do and how an authorized Owner or Admin configures access.