Manage staff accounts and permissions

Remove Taylor and add Miguel to staff accounts today. Give Miguel product and orders access but no billing or theme permissions. Transfer Taylor’s draft blog posts and any assigned orders to Miguel, then lock the store admin session and force a password reset for any remaining active sessions. Confirm the changes to the team and note who made them.

Before I hand this to HR, make the staff-permissions review easier. List who currently has billing, theme, and app install rights; call out accounts that have owner-level access but are contractors; and highlight any shared logins or unused admin accounts older than 90 days. Recommend minimal permission changes that will let people do their jobs without creating a security hole.

I just removed Jenna’s account instead of the contractor’s and she lost access to a live order queue. Jenna is the only one who can finish fulfillment today and I can’t re-create her exact permissions from memory. I’m afraid we’ll miss shipments. What’s the fastest way to restore her access and recover any in-progress work, and what immediate steps prevent this happening again?

When orders spike I keep adding admin rights to temporary contractors and later have to clean up messy permissions and explain security exceptions to leadership. I waste time auditing and the team loses trust in controls. Which specific habit should I stop and what lightweight permission workflow will keep me efficient without creating recurring security debt?