Choosing an agency

How to Give an Agency Access to Amazon, Walmart and TikTok Shop Safely

How to Give an Agency Access to Amazon, Walmart and TikTok Shop Safely

The first practical step with any marketplace agency is giving them access to your accounts, and it is also where many brands take unnecessary risks. Sharing your main login and password can expose bank details, tax information and two-step verification codes, and makes it hard to see who did what. Amazon, Walmart and TikTok Shop all have built-in ways to invite users with limited permissions. Here is how each one works and what access an agency actually needs.

Why you should never share your password

  • Control. A user invitation can be limited, changed or removed in seconds. A shared password means changing it, and updating two-step verification, every time someone leaves.
  • Accountability. Separate users let you see which person or company made a change.
  • Responsibility. Walmart says plainly that sellers are responsible for their users' actions, according to Walmart Marketplace Learn (updated Jul 2, 2025). The same logic applies on every platform: whatever happens in your account is on you.
  • Sensitive areas stay private. On TikTok Shop, some areas are only visible to the shop owner's account "for safety reasons," per TikTok's Seller Center roles guide (updated Aug 2025).

How each platform handles user access

PlatformWhere to invitePermission optionsKept by the owner
Amazon Seller CentralSettings → User permissions (primary account holder)Access level set separately for each area of Seller CentralPrimary user controls permissions; Amazon itself "cannot grant permissions"
Walmart Seller CenterPeople and permissions → Add User (Admins only)3 roles: Admin, Read and Write, Read OnlyWalmart advises limiting Admin to people who can accept binding terms for your company
TikTok ShopBusiness Center → Accounts → Shops → assign member or partner8 Seller Center roles, e.g. Main Administrator, Advertising Manager, Finance SpecialistUser management, account details, bank accounts, tax info and linked TikTok accounts

Sources: Amazon Seller Forums staff reply; Walmart Marketplace Learn; TikTok Business Help Center. Menu names change from time to time, so check the current help page in your account.

Amazon

Only the primary account holder of a Professional selling account can grant access. In an Amazon Seller Forums reply, an Amazon staff member explained that you open Settings, choose User permissions, enter the new user's details and send an invite. Once the user accepts the email link, you set their access level for each area of Seller Central. The staff member also noted that "Amazon cannot grant permissions," so this always has to come from you.

Walmart

Walmart offers three roles, according to Walmart Marketplace Learn. Admin has full access, including generating API credentials, requesting special category approvals, creating users and accepting binding legal agreements. Read and Write covers day-to-day work like setting up items and viewing reports. Read Only can view data and download reports but cannot change anything. Only Admins can add users.

TikTok Shop

TikTok Shop members are added through TikTok Business Center, where you can assign a member or a partner to your shop and pick their permissions, per TikTok's Business Center help article. Seller Center has eight roles. Even the Main Administrator role cannot see user management, account information, bank accounts, tax information or linked TikTok accounts; those stay with the shop owner.

What access an agency actually needs

  • Full channel management: listings, inventory, pricing, orders, ads and reports. On Walmart that usually means Read and Write; on TikTok Shop, roles such as Product Management, Advertising and Order Fulfillment, or Main Administrator if they run everything.
  • Ads only: advertising and reporting access, without finance or account settings.
  • Reporting or audits: view-only access.
  • Almost never: bank account, tax settings, user management, or the ability to accept legal agreements. Keep these with an owner or an officer of your company.
Grant the smallest role that lets the agency do the job, then expand it if a task really requires more. It is much easier to add permissions than to undo a mistake.

Access checklist

  1. Turn on two-step verification for your own owner account first.
  2. Invite each agency team member with their own work email, never a shared login.
  3. Choose the lowest role that covers the agreed scope of work.
  4. Keep bank, tax and user-management settings with your company.
  5. Write the access scope into your agency agreement.
  6. Review users every quarter and remove anyone who no longer needs access.
  7. When a contract ends, remove all agency users on the same day.

For more on vetting partners, see our guide on how to choose an e-commerce agency.

How Atronia Innovations works with your accounts

We only access client accounts through user invitations, and we never ask for passwords. Your company stays the owner of every account, listing and ad, and you can remove our access at any time. See our pricing or talk to our team.

Sources