Andrew Evershed

Collaborator access on Shopify is built on trust. When a merchant approves a request, they're giving a partner access to a live store — and until now, they had little to go on beyond a name and a message. Starting now, every new collaborator request shows merchants details about the partner organization — in the admin and in the request email: • How long the partner has been on Shopify • The country where their account was registered • The country the request was sent from • How many stores they're actively collaborating with We're seeing bad actors try to social engineer their way into real merchant stores using Collaborator accounts. That hurts merchants, and it creates an uneven playing field for Partners who do great work. Real context on every request makes it harder to fake trust — and lets your track record speak for itself. This builds on identity verification for Partners, with more coming as we strengthen trust across the Partner ecosystem. Collaborator requests should be an easy yes for merchants working with trustworthy Partners. That's what we're building toward. Learn more: shopify.dev/changelog/partne…

Shopify is strengthening trust for partners across the ecosystem, starting with identity verification. Partners take actions across Shopify that can directly affect merchants — from collaboration to apps and other sensitive workflows. Over time, IDV will be introduced across more partner areas where trust and accountability matter. We’re starting with collaborator requests. Collaborator access is built on trust: when a merchant approves a request, they’re giving a partner access to a live store. IDV helps protect merchants, reduce abuse, and make it harder for bad actors to operate. It also helps create a better experience for legitimate partners by raising the trust baseline across the ecosystem. Partners will have time to complete IDV before it becomes mandatory. For this launch, IDV can be required before sending a new collaborator request, but it isn’t required just to access collaborator shops where access has already been granted. Learn more: shopify.dev/changelog/identi…

So excited to get this into the hands of Partners soon! A big first step in our path to burn down the toil of building on Shopify We're moving our Partners towards using first-class features our merchants know & love, ensuring everyone benefits when we ship improvements.

Staging on Shopify is getting a major upgrade. I had the pleasure of announcing Bulk Data Management via Shopify CLI at our .dev conference: making store copy faster, safer, and simpler. See the roadmap & demo: youtu.be/IRuQRRc8Npo?t=2702

First up, Organizations & RBAC. We’ve had the concept of multi-store Organizations for Plus for quite some time and it was time to roll it out for everyone. Now it’s easier to manage your staff, billing, and more all in one place - no matter how many stores you’re running. Role-based access control (RBAC) was a very long time coming revamp to how access is managed at Shopify. Last year we invested a lot into new granular permissions to key critical parts of the platform. However, the consequence of that was a significant increase in the number of permissions to understand and manage. We’re making that simpler: roles for all merchants with some pre-defined templates to get you started. And - for Plus merchants that already have large teams - we’ve rebuilt our previous legacy Role implementation into more standard Role and Group models to enable much more flexibility in managing access (multiple roles per user too!). shopify.com/ca/blog/organiza…

Looking to add that special touch to your Shopify admin? You can now upload your logo to make it yours - bringing your brand into Shopify no matter where you're working 🤩 Fun fact: the first icon uploaded was a 🍪 Learn more here: changelog.shopify.com/posts/…