Agencies and multiple stores

Status: launch-certified for operator-assisted onboarding. The agency model organizes multiple Shopify stores without combining client data or permissions. Production activation remains controlled per agency and store rather than self-service.

Each store stays separate, and access is limited to the stores and actions assigned to the agency member.

#How stores are organized

In the current model:

• one agency can administer multiple stores;
• a store can be unassigned or assigned to one active agency;
• the same person can belong to multiple agencies;
• a member can be allowed to work across all agency stores or only selected stores, according to the access granted.

The same store cannot be administered by multiple agencies at the same time in this version.

#Agency roles

Three base roles are defined:

• Agency Admin - manages agency members and the access available for assigned stores;
• Agency Operator - can work with synchronization, checks, problems, fixes, and images within granted permissions;
• Agency Viewer - has read-only access to allowed areas.

The role is the starting point. Permissions decide what each person can actually do.

#You cannot delegate more access than you have

An agency administrator can grant only rights they already hold. Publishing a fix to Shopify and restoring an image are sensitive permissions and must be granted explicitly; they are not automatically included in the Agency Admin or Agency Operator roles.

#How access is checked

For every action that requires a specific right, PROVEN checks the user, agency, assigned store, and required permission again. Knowing an ID or opening a direct link does not grant access on its own.

If a store is moved to another agency or a person’s access is suspended, rights are evaluated again from the current configuration.

#Agency separation

A member of Agency A cannot view or modify Agency B data simply because they know a store name or identifier. Access stays limited to assigned stores and active permissions.

#Onboarding and relationship changes

Agency onboarding and production activation are operator-assisted. Creating the agency-store relationship, releasing a store, or moving it to another agency are controlled administrative changes.

The current model does not include self-service signup or email/token invitations that automatically create Agency access.

#What the merchant sees

A merchant can see in PROVEN whether the store has an active agency relationship and the name of the associated agency. This area is informational: the merchant cannot assign, release, or reassign the agency from this screen.

If the relationship is disputed, the merchant has a support contact path.

#History across multiple stores

When the information is relevant and available, history can retain:

• the user;
• the agency;
• the store;
• the action;
• the result;
• the available reason for the decision.

This keeps changes traceable in the context of the store and agency that made them.

#What stays separate

Agency membership does not automatically grant Shopify access, store-owner rights, or access to merchant billing. Those rights remain separate.

#What is not included in the current model

The current model does not include:

• self-service agency signup or email/token invitations;
• consolidated agency billing;
• shared Fix Credit budgets or packages across all stores in an agency;
• the same store assigned to multiple agencies at the same time;
• transfer of Shopify installation ownership to the agency;
• enterprise authentication through SSO/SAML or SCIM administration;
• impersonating another user.

For the general access model, see Access, roles, and team. For change history, see Audit and traceability.