Amazon Secondary User Access: Security & Delegation Guide

Delegate the tasks a person needs without sharing the account owner’s login. Access should follow the actual employee or external-provider relationship and the tools they will use.

Choose the Appropriate Access Route

Amazon’s user-permissions guidance distinguishes internal secondary users from external Authorized Partners. Use the current external-provider route for an agency or contractor rather than treating every collaborator as an employee. Available settings can vary by account and marketplace.

Grant the Minimum Required Capability

Seller Scale recommends writing a task list before granting permissions: for example, reporting only, campaign management, listing work, or shipments. Map those tasks to the permissions displayed in the account and verify them with the invitee. Do not grant broad administration simply because a role is called “account manager.”

• Keep bank, tax, user administration, and sensitive financial access restricted unless the work requires it.
• Use separate identities and required multifactor authentication.
• Test that the user can do the intended task and cannot access unrelated tools.

Review the Separate Permission Systems

Brand Registry protection and selling roles are separate from Seller Central user access. Advertising-console access and SP-API app authorizations should also be checked independently. A listing designer does not automatically need infringement-reporting or administrator rights.

Maintain and Revoke Access

1. Record who approved each invitation, its purpose, and the access granted.
2. Review access when responsibilities change or a contract ends.
3. Revoke unused app authorizations separately from human logins.
4. Retain an accountable internal owner for permissions and recovery.

Least-privilege access reduces exposure; it does not guarantee that an account cannot be linked, compromised, or restricted.

Sources and Scope

The linked sources support the documented points above. Recommendations and hypothetical calculations are editorial guidance, not Amazon rules or promised results. Check the current requirements for your marketplace and account before acting.

• Amazon user permissions guidance
• Amazon Brand Registry roles
• Amazon seller code of conduct