Which Amazon permissions should I give a full-service agency?
Match each grant to a named task. Review ad spending, listing edits, Brand Registry work and financial reports separately before you approve access.
A proposal that says “full-service Amazon management” can cover four different jobs. One person edits listings, another runs ads, a third reconciles fees, and the brand owner handles infringement reports. Before approving access, ask the agency to put a name and a deliverable beside each job.
This worksheet helps you agree on the scope. For the invitation itself, use the Seller Central agency setup guide. The worksheet describes work to approve. The names of buttons and permissions will depend on the Amazon service you are using.
Start with the work due this week
Ask the account lead to walk through one actual deliverable. Suppose you hired an agency to launch ads for a new line of coffee cups. Does the lead need to read last month’s campaign results, change bids, or edit the product listing too? Those are three different requests. Write down who approves changes to spend and who can publish a listing edit.
| Work in the brief | What to ask the agency | What the seller can keep |
|---|---|---|
| Weekly ad report | Which campaign figures do you need to read? | Decisions about bids and budgets |
| Campaign management | Who can change spend, and up to what agreed amount? | Approval above that amount |
| Catalog updates | Which listings will you change? Who checks the copy? | Approval for listings outside the brief |
| Financial reconciliation | Which report, fields and date range do you need? | Bank details and payout changes |
| Brand protection | Are you investigating a listing or reporting an IP violation? | Control of who gets Brand Registry roles |
Read the answers back to the account lead. If they only need a monthly fee total, ask whether a report supplied by your finance team will do. If they need to investigate individual charges, agree on the report they can see and who will receive exported copies.
Check the Amazon account that controls each task
Amazon’s service provider documentation describes two decisions. The seller authorizes the agency for eligible Seller Central roles. The agency administrator then assigns people to that seller and sets their permissions. Ask the administrator which employee will take the first assignment and who will cover absences. Each employee should use their own invited identity.
Brand Registry has its own roles. Amazon describes its Administrator as someone who can grant roles to other accounts. Its Registered Agent role covers a third party authorized to report suspected IP violations. Ask for the specific brand protection task before discussing either role. A request to update ad bids gives you no reason to grant the power to appoint another brand administrator.
Put one approval in writing
Here is an example a seller can adapt. “For the US coffee cup launch, Maya may review campaign results and adjust bids within our agreed budget through the end of the campaign. Lee approves a higher budget. The seller’s finance team supplies a monthly fee summary. Payout settings and brand protection stay with the seller.”
Keep this note with the service agreement. Include the marketplace, the account, the employee, the client approver and the next review date. If the account lead later asks for access to change listings, add the new task and its owner before widening the grant. That gives the replacement lead a record of why the original decision was made.
Test the grant with a real assignment
Have the assigned employee sign in and open the correct seller account. For a reporting assignment, ask them to produce the first report. For a listing assignment, ask them to locate the agreed product and prepare a change for review. A successful sign-in alone does not tell you whether the person can do the job.
If a required Seller Central permission is unavailable, have the provider check its role approval in Solution Provider Portal. Amazon says the relevant role must be approved before the seller can grant it. The seller can handle the blocked task while the provider checks. There is no need to send the employee the seller’s password.
Review access when the assignment changes
When the campaign ends, compare the agreed work with the employees still assigned to your account. Amazon’s portal lets the provider administrator review assignments for a particular seller and remove an employee from that client. If only the ad specialist is rotating off, identify that person and confirm that the replacement can handle the next report.
When the agency no longer needs access to your seller account, revoke its authorization from Manage Services in Seller Central.
Repeat the check for each separate service in the worksheet. Record what you removed, who checked it and what work continues. For a change that spans several client tools, use the agency staff handover checklist.
Frequently asked questions
Does an agency running ads need access to payouts?
Ask what financial task the agency will perform. If the brief covers campaign spending alone, leave payout changes with the seller. Ask separately about any report the agency needs.
Who decides which agency employees can work on my account?
The seller authorizes the provider. The provider's administrator assigns individual employees to the seller account and sets their permissions.
What should I do if a permission the agency needs is unavailable?
Ask the agency to check whether Amazon has approved the relevant Seller Central role for its provider account. Keep the task with the seller while the agency checks.
How Junify handles this
- Doing this by hand
- You agree with each client on how access is handed over, add and remove people platform by platform whenever staff change, and keep track of which staff member used which client's account.
- With Junify
- Keep using Amazon's provider and employee permissions for Seller Central. If the same team also works in a client tool that allows delegated use but has only one login, Junify can let staff open it without seeing its password. Your admin can remove a staff member's Junify access when the assignment ends.
The demo needs a computer screen. Get the link by email and open it there.
Sources
- Amazon: Service provider registration and role approval
- Amazon: Manage users in Solution Provider Portal
- Amazon: What are Brand Registry roles?
-
Giving an agency access to Google Merchant Center
An admin adds each agency person by Google Account. Where Merchant Center for Agencies is available, the agency can request a link instead. No login is shared.
-
Giving an SEO agency access to Google Search Console, and removing it
A property owner adds each agency person by Google Account as a full or restricted user. If the agency verified the site itself, removal takes one more step.
-
Giving an agency access to Klaviyo or Mailchimp without sharing your login
Mailchimp lets an agency connect its own account to yours at a level you choose. In Klaviyo, an Owner or Admin adds each agency person as a user with a role.