How to Give an Amazon Agency Seller Central Access Without Sharing Your Password

Why password sharing creates more than a security problem

A shared primary login makes it difficult to attribute changes, remove one provider or prove who controlled recovery settings. It can also expose financial, tax, customer or brand information that has nothing to do with the assignment.

The brand should own the primary account, recovery email, phone and multifactor authentication. An outside agency should connect through Authorized Partners using its approved roles. Individual staff should not circulate one provider credential among a team.

Map tasks before selecting permissions

Do not begin by turning on every permission and planning to reduce it later. List the actual work: edit catalog fields, upload images, open support cases, view advertising, review inventory or reconcile payments. Then map those tasks to the current controls available in the account.

Some assignments cross sensitive boundaries. A catalog team may not need payment reports. A finance specialist may not need to edit detail pages. An advertising operator may need campaign access but not account-user administration. Keep these roles separate when the platform permits it.

Use a controlled onboarding sequence

Confirm the legal or business contact, confidentiality terms, scope and internal owner before connecting anyone. The Authorized Partners workflow applies only when the provider has the Amazon-approved roles needed for the work. Otherwise, follow the current Seller Central instructions for the account and region. Secondary users are for people inside the seller's organization. Connect only a verified provider identity, not an address supplied in an unconfirmed chat.

After access is accepted, ask the provider to demonstrate only the required screens. Record the date, role and approver. If a needed task is unavailable, review the permission mapping; do not solve it by sending a password or a one-time code.

Amazon: Service-provider authorization workflow

Plan the transition before replacing an agency

A provider change should begin with an ownership inventory: Seller Central users, advertising access, brand assets, source files, dashboards, case records, catalog workbooks and external software. Note open cases, scheduled promotions, bulk files in progress and changes waiting to publish.

Create the new access separately and test it before removing the old provider. Once the handoff is accepted, revoke old users and tokens, rotate credentials the former provider legitimately knew, and monitor material changes. Do not accuse a former provider without evidence; preserve logs and escalate unusual activity through the appropriate support and security channels.

Review access as an operating control

Permissions are not a set-and-forget setup task. Review active providers, users, scopes and last-known business need at a regular interval and after staffing changes. Remove access that no longer has an owner or purpose.

Keep a short access register outside the marketplace: who approved the provider, what work it performs, how it authenticates, which tools it can reach and how to revoke them. Do not store passwords in that register. The purpose is accountability, not another secret vault.

Frequently asked questions