Give Amabrik access to your BigCommerce

You’ve asked Amabrik to install the snippet for you. To do that, we need to reach Script Manager (or the theme files) in your BigCommerce control panel. The safe way to grant that is to add us as a user with just the permissions we need, rather than sharing your owner login. This page shows you how, plus a fallback and how to remove our access once the install is done.

Before you start, make sure you have admin rights on the store. If you’re not sure, see creating an admin account on BigCommerce.

The email to invite

When you submit the Request Installation form in your Amabrik dashboard, we confirm the exact email address you should invite. Use that address, not a guess. It’s shown to you when you submit the form, so keep that page handy while you follow the steps below.

1. Add a user for Amabrik (recommended)

This is the safest option. You create a user account with only the permissions needed to add the snippet, and nothing else. You’ll need to be signed in as the store owner, or as a user with the Manage Users and Edit Users permissions.

1. Sign in to your BigCommerce control panel.
2. Go to Settings in the left menu.
3. Under the Account heading, open Users.
4. Select Create a User Account (on some stores this reads Add a User).
5. Enter the email address Amabrik gave you on the Request Installation form. Fill in a name if it asks for one.
6. Set the permissions. The cleanest way is to start from a Custom role, clear the default options, and turn on just these:
   • Store Design: lets us reach the storefront design tools.
   • Use Script Manager: lets us add the snippet through Script Manager. If we’ve told you we’ll edit theme files instead, also turn on the permission to manage themes. Leave the high-risk permissions (such as issuing or deleting API keys) off; we don’t need them.
7. Save. BigCommerce sends an invitation to that email.

We get the invitation and accept it to join your store. Once we’ve added the snippet and you’ve confirmed your widgets are live, remove the user (see below).

2. Temporary login (fallback, least preferred)

If you can’t add a user, you can give us a temporary login. This is the least safe choice, so only use it if you have to:

• Create a separate user account just for us with only Store Design and Use Script Manager, then share its login through a secure channel (never plain email or chat).
• Delete that account the moment the install is done.

We’ll always prefer the user invite in step 1. Sharing your own owner login is not something we ask for, and you shouldn’t do it. The owner login also controls billing and the plan, so it’s the wrong tool here.

Remove the user after the install

Once your widgets are showing on your store, take our access away. You don’t need to keep us connected for Amabrik to keep working, since the snippet lives in your store and runs on its own.

1. Go to Settings > Users in your control panel.
2. Find the Amabrik account (the email you invited).
3. Click the Action menu next to it and choose Delete (or set it to inactive first if you want to keep the record).
4. Confirm.

That’s it. Your widgets keep running, and we no longer have any way into your store.

FAQ

Why a separate user instead of my login?

A dedicated user lets us in with only the permissions we need, and you can remove it in seconds. Your owner login gives full control of billing and the whole store, so it’s the wrong tool here. Sharing it also breaks if you ever change your password.

Which permissions are the bare minimum?

Store Design and Use Script Manager. Store Design reaches the storefront tools; Use Script Manager lets us add the snippet. If we’re editing theme files instead, add the theme management permission too.

Can a Store Administrator do this, or only the owner?

A Store Administrator, or any user with Manage Users and Edit Users, can create the account for us. Only the store owner can install apps and move domains, but adding our snippet doesn’t need either of those.

Will removing the user break my widgets?

No. The snippet stays in your store and keeps loading your widgets. Deleting our user account only stops us reaching your control panel; it has no effect on what visitors see.

What if the invitation doesn’t arrive?

Check the spam folder for the invited address, then re-send it from Settings > Users. Make sure you typed the exact email shown on your Request Installation form.