Junify
Managing client accounts at an agency

Which Amazon permissions should I give a full-service agency?

Match each grant to a named task. Review ad spending, listing edits, Brand Registry work and financial reports separately before you approve access.

Updated November 9, 2026

A proposal that says “full-service Amazon management” can cover four different jobs. One person edits listings, another runs ads, a third reconciles fees, and the brand owner handles infringement reports. Before approving access, ask the agency to put a name and a deliverable beside each job.

This worksheet helps you agree on the scope. For the invitation itself, use the Seller Central agency setup guide. The worksheet describes work to approve. The names of buttons and permissions will depend on the Amazon service you are using.

Start with the work due this week

Ask the account lead to walk through one actual deliverable. Suppose you hired an agency to launch ads for a new line of coffee cups. Does the lead need to read last month’s campaign results, change bids, or edit the product listing too? Those are three different requests. Write down who approves changes to spend and who can publish a listing edit.

Work in the brief What to ask the agency What the seller can keep
Weekly ad report Which campaign figures do you need to read? Decisions about bids and budgets
Campaign management Who can change spend, and up to what agreed amount? Approval above that amount
Catalog updates Which listings will you change? Who checks the copy? Approval for listings outside the brief
Financial reconciliation Which report, fields and date range do you need? Bank details and payout changes
Brand protection Are you investigating a listing or reporting an IP violation? Control of who gets Brand Registry roles

Read the answers back to the account lead. If they only need a monthly fee total, ask whether a report supplied by your finance team will do. If they need to investigate individual charges, agree on the report they can see and who will receive exported copies.

Check the Amazon account that controls each task

Amazon’s service provider documentation describes two decisions. The seller authorizes the agency for eligible Seller Central roles. The agency administrator then assigns people to that seller and sets their permissions. Ask the administrator which employee will take the first assignment and who will cover absences. Each employee should use their own invited identity.

Brand Registry has its own roles. Amazon describes its Administrator as someone who can grant roles to other accounts. Its Registered Agent role covers a third party authorized to report suspected IP violations. Ask for the specific brand protection task before discussing either role. A request to update ad bids gives you no reason to grant the power to appoint another brand administrator.

Put one approval in writing

Here is an example a seller can adapt. “For the US coffee cup launch, Maya may review campaign results and adjust bids within our agreed budget through the end of the campaign. Lee approves a higher budget. The seller’s finance team supplies a monthly fee summary. Payout settings and brand protection stay with the seller.”

Keep this note with the service agreement. Include the marketplace, the account, the employee, the client approver and the next review date. If the account lead later asks for access to change listings, add the new task and its owner before widening the grant. That gives the replacement lead a record of why the original decision was made.

Test the grant with a real assignment

Have the assigned employee sign in and open the correct seller account. For a reporting assignment, ask them to produce the first report. For a listing assignment, ask them to locate the agreed product and prepare a change for review. A successful sign-in alone does not tell you whether the person can do the job.

If a required Seller Central permission is unavailable, have the provider check its role approval in Solution Provider Portal. Amazon says the relevant role must be approved before the seller can grant it. The seller can handle the blocked task while the provider checks. There is no need to send the employee the seller’s password.

Review access when the assignment changes

When the campaign ends, compare the agreed work with the employees still assigned to your account. Amazon’s portal lets the provider administrator review assignments for a particular seller and remove an employee from that client. If only the ad specialist is rotating off, identify that person and confirm that the replacement can handle the next report.

When the agency no longer needs access to your seller account, revoke its authorization from Manage Services in Seller Central.

Repeat the check for each separate service in the worksheet. Record what you removed, who checked it and what work continues. For a change that spans several client tools, use the agency staff handover checklist.

Frequently asked questions

Does an agency running ads need access to payouts?

Ask what financial task the agency will perform. If the brief covers campaign spending alone, leave payout changes with the seller. Ask separately about any report the agency needs.

Who decides which agency employees can work on my account?

The seller authorizes the provider. The provider's administrator assigns individual employees to the seller account and sets their permissions.

What should I do if a permission the agency needs is unavailable?

Ask the agency to check whether Amazon has approved the relevant Seller Central role for its provider account. Keep the task with the seller while the agency checks.

How Junify handles this

Doing this by hand
You agree with each client on how access is handed over, add and remove people platform by platform whenever staff change, and keep track of which staff member used which client's account.
With Junify
Keep using Amazon's provider and employee permissions for Seller Central. If the same team also works in a client tool that allows delegated use but has only one login, Junify can let staff open it without seeing its password. Your admin can remove a staff member's Junify access when the assignment ends.

Sources

More on this topic