# Managing Shopify Access

Most admin accounts only need to be set up during the initial setup and are infrequently accessed. Setting permissions correctly during the initial setup helps prevent mistakes or misconfigurations in Shopify and Google Cloud.

### Default Setup

==- Shopify Accounts

- By default, every Shopify store has a store owner and optional staff members. Shopify staff members can be given [specific permissions](https://help.shopify.com/en/manual/your-account/staff-accounts/staff-permissions/staff-permissions-descriptions) to perform their duties, such as managing or installing apps.
- All Shopify staff who have permission to access the Retail Cloud Connect Shopify App can edit all settings inside the application. This includes editing catalog import settings.
- Retail Cloud Connect does not generally require ongoing configuration or management after it has been installed on the storefront, so Nimstrata recommends that administrators **limit the staff who have access to the application**.

![](/static/images/retail-cloud-connect-app-permissions.png)

===

<br/>

### Advanced or Enterprise Merchants

==- Google Cloud Accounts

- Google Cloud accounts use the same login as other Google Workspace accounts. A separate account for Google Cloud is not required if the organization already uses Gmail, Google Calendar, Google Drive, etc.
- If a Google account is needed, follow [these instructions](https://support.google.com/accounts/answer/27441?hl=en) on Google’s website to create one.
- The organization may limit who can access Google Cloud. If an error appears when attempting to access Google Cloud, [contact Nimstrata](https://www.nimstrata.com/contact) for help working with the merchant's IT team.
- Advanced Retail Catalog settings are managed inside Google Cloud. This includes potentially dangerous settings such as deleting catalogs or changing search behavior. If multiple staff members need Google Cloud access, follow the [principle of least privilege](https://csrc.nist.gov/glossary/term/least_privilege) and only assign **Retail Viewer** or **Retail Editor** [IAM roles](https://cloud.google.com/retail/docs/iam) to non-administrative staff.

==- Nimstrata Retailers

- During first setup, merchants connect the Shopify store to a **Nimstrata Retailer**. Most merchants only have one Shopify store and connect it to one Retailer.
- If the company has multiple Shopify stores, such as testing or development stores, they can be connected to the same Retailer to simplify account management.
- The first staff member to create a Retailer is the **Administrator** of that Retailer by default.

[Contact Nimstrata](https://www.nimstrata.com/contact) to add a Shopify store to an existing Retailer or change Retailer administrator access.

===

[!ref Nimstrata's Google Cloud Permissions](/faq/google-cloud-iam-permissions/)