Shopify staff permissions for inventory: who can edit what
Shopify staff permissions for inventory: exactly who can edit quantities, counts, transfers, and costs — plus a least-privilege matrix you can copy today.
InventoryX is in development and not available today. ClearStock is the live Shopify app.
Short answer: inventory-editing power in Shopify lives in a handful of store permissions — Manage inventory (excluding transfers), Perform inventory counts, View/Manage transfers, Manage shipments, plus Products → Edit cost and Store settings → Manage locations. Every inventory permission automatically requires View products. The whole setup is assignable by role at Settings → Users and permissions, and POS-specific behavior (discounts, refunds, opening the drawer) is controlled separately through POS roles and staff PINs.
What follows is the permission map, verified against the Shopify Help Center in October 2026, and a least-privilege matrix built for a store with stock and a few pairs of hands.
The inventory permission list, plainly
From the Shopify Help Center's store permissions reference (accessed October 2026):
| Permission | What it actually lets someone do |
|---|---|
| Inventory → Manage inventory (excluding transfers) | Edit inventory quantities, SKUs, and barcodes; create, track, import, and export inventory. This is the big one — it's the ability to change what the system says you own |
| Inventory → Perform inventory counts | Count stock and submit results in the Shopify POS app. Creating and reviewing stock counts in the admin needs additional permissions |
| Inventory → View transfers | See inventory transfers |
| Inventory → Manage transfers | Create and update transfers — moving stock between locations |
| Inventory → Manage shipments | Create, track, and update shipments for transfers |
| Products → View cost | See cost per item |
| Products → Edit cost | Change cost per item — this feeds your COGS and profit reports |
| Products → Export | Export products and inventory (data leaves your store) |
| Products → Delete | Delete products, variants, and collections — the nuclear option in a stock context, since deleting a variant deletes its tracked inventory |
| Store settings → Manage locations | Create, change, and delete the locations your stock lives at |
Three structural rules from the same reference worth knowing before you assign anything:
- Every inventory permission drags in View products automatically and it can't be deselected.
- Permissions can't be narrowed to individual products — within a store, a role either can manage inventory or can't. There's no "this person can only edit T-shirts."
- Some permissions are classed sensitive (billing, payment settings, customer data export) and get extra treatment; none of the inventory ones are, which is exactly why inventory editing is the permission most often handed out casually.
Why least-privilege matters for stock specifically
Your inventory quantities are the denominator of every decision you make — reorder points, days of cover, buying lists, velocity. One casual "sure, you can fix the counts" gives a staff member write access to the number your whole operation runs on, with an audit trail (adjustment history) as the only record. Note the asymmetry: reading stock numbers (View products) is nearly harmless; writing them is where errors, "helpful" manual fixes, and shrinkage concealment all live. Least-privilege for stock means: as few people as possible can edit quantities, and those who do are the ones who also count (the cycle count guide owns that cadence).
There's a practical fraud angle too. A staff member who can both edit quantities and has broad POS permissions can paper over a cash-drawer shortfall or a "lost" unit by adjusting the record to match the shelf. Separating the abilities — one person counts, a different person approves — is the cheapest control in shrinkage prevention there is.
The matrix
Copy this and adjust names. It's built on the assumption that you (the owner) want accurate numbers more than you want convenience.
| Owner | Store manager | Stock/ops associate | POS cashier | Seasonal help | |
|---|---|---|---|---|---|
| View products | ✅ | ✅ | ✅ | ✅ | ✅ |
| Manage inventory (edit quantities, SKUs, barcodes) | ✅ | ✅ | ✅ | ❌ | ❌ |
| Perform inventory counts | ✅ | ✅ | ✅ | ❌ | ❌ |
| Manage transfers | ✅ | ✅ | ❌ | ❌ | ❌ |
| Manage shipments | ✅ | ✅ | ❌ | ❌ | ❌ |
| Edit cost | ✅ | ❌ | ❌ | ❌ | ❌ |
| Edit price | ✅ | ✅ | ❌ | ❌ | ❌ |
| Export products/inventory | ✅ | ✅ | ❌ | ❌ | ❌ |
| Delete products | ✅ | ❌ | ❌ | ❌ | ❌ |
| Manage locations | ✅ | ❌ | ❌ | ❌ | ❌ |
The deliberate restrictions, because they're the ones people override under pressure:
- Cashiers don't edit quantities. If a cashier finds a count mismatch mid-shift, the correct move is a note to the person who owns counts — not a live adjustment at the counter. If your cashier genuinely works alone, give them counts but not free quantity edits, and review their adjustment history weekly.
- Cost editing stays with the owner. Cost per item silently feeds profit reports; a typo there poisons margin data without any visible symptom.
- Delete is owner-only. Deleting a variant removes its inventory history from the working catalog. Archiving is the reversible alternative, and it should be the default.
- Manage locations is owner-only because changing locations reshapes every stock number in the store.
POS roles and PINs: the second layer
If you run POS, there's a separate permissions surface. As of October 2026, POS permissions are managed through POS roles at the organization level, not through store permissions — the Help Center is explicit that store-level staff permissions don't govern the POS app. That's where you control what a staff member can do at the counter: apply discounts, process refunds, and similar register-level actions.
On top of roles, staff PINs gate the register itself: each staff member gets a POS PIN for logging in, and Shopify documents per-staff POS PIN management separately from admin accounts. The operating rule that matters for stock: no shared PINs, ever. A shared register PIN makes every adjustment and every discount unattributable, which quietly destroys the value of both the POS audit trail and your adjustment history. When a count variance investigation dead-ends at "someone was on register 2," a shared PIN is usually why.
Setup path
- Settings → Users and permissions (or Settings → Users, depending on admin version): create a role per column in the matrix above rather than editing the default "Full staff" role.
- Assign the inventory permissions first, then let Shopify's dependency behavior pull in View products automatically.
- Organization admin → POS roles for anyone touching a register; assign the POS device setup role only to whoever actually pairs hardware (for the scanning side, see our barcode inventory guide).
- Issue individual POS PINs to each staff member and delete them the day someone leaves.
- Run the audit quarterly: open each role, ask "does this person's actual job require this?", and remove one thing. Roles only grow; they never shrink on their own.
One honest limitation: Shopify's permissions don't include an approval step for inventory edits — anyone with Manage inventory can change a quantity outright, no second pair of eyes required. If you want edit-with-approval, that's a process you layer on top (adjustment-log review, count sign-offs), not a setting.
Common questions
Which Shopify permission lets a staff member edit inventory quantities? Inventory → Manage inventory (excluding transfers) — it allows editing inventory quantities, SKUs, and barcodes, plus importing and exporting inventory. It automatically requires View products. Transfers and shipments are governed by separate Manage transfers and Manage shipments permissions (Shopify Help Center, as of October 2026).
Can I restrict a staff member to certain products only? No. Store permissions apply across the whole store — there's no product-level restriction for inventory editing. If someone must touch only part of the catalog, the practical pattern is time-boxed access (grant during receiving windows, remove after) rather than product scoping.
Do POS staff permissions come from the same place as admin permissions? No. As of October 2026, POS permissions are organization-level POS roles, separate from store permissions in the admin. Store permissions control the Shopify admin; POS roles control what a staff member can do at the register, and individual POS PINs control who is logged in.
Should cashiers be able to adjust inventory in Shopify? Generally no. Quantity edits should sit with the person who owns counts and receiving, so that every adjustment has a reason and an owner. Cashiers should report mismatches for a supervised correction — this separation is a basic control against both honest errors and shrinkage concealment.
How do I stop staff from seeing product costs? Don't assign Products → View cost (and obviously not Edit cost). View products alone shows catalog and stock data without the cost fields, which is why the matrix above gives cost visibility to the owner only.
Next step: open Settings → Users and permissions today and count how many roles currently have Manage inventory. If the number is bigger than the number of people who actually count stock, you've found tomorrow's 15-minute fix — and then check the POS side for shared PINs, because that's the gap that shows up months later as a variance nobody can explain.