- Change your listings
- Mess with your PPC
- Pull your reports and data
- Tank your brand
Start here:
- User permissions: https://sellercentral.amazon.com/account/permissions
- Seller Central Apps: https://sellercentral.amazon.com/apps/manage
- Buyer-side account apps: https://www.amazon.com/ap/adam
- Brand registry: https://brandregistry.amazon.com/brg/user-permissions
How to Audit and Lock Down Your Amazon Account Permissions
Here is a step-by-step process to run every quarter:
- Go to Settings, then User Permissions in Seller Central. Review every user listed. If you do not recognize a name or they no longer work with you, remove them immediately.
- Check your SP-API authorizations. Go to Settings, then Developer authorizations. Revoke access for any tools or agencies you no longer use.
- Review your advertising account access. Amazon Ads has separate permissions. Go to Amazon Advertising, then Account Settings and check who has access.
- Change your password. If any VA or agency had your main login credentials, change your password and enable two-factor authentication.
- Audit your email access. Make sure no one has access to the email address linked to your Amazon account.
The worst-case scenario is not someone stealing your money. It is someone changing your listings or running unauthorized PPC campaigns, which can tank your organic ranking and take months to recover from. Fifteen minutes of account hygiene every quarter prevents catastrophic problems.
Frequently Asked Questions
How do I remove old user permissions from my Amazon Seller Central account?
Go to Settings, then User Permissions in Seller Central. Find the user you want to remove and click Delete next to their name. If they had API access, also go to Developer authorizations and revoke their app permissions separately.
Can a former VA or agency still access my Amazon account after I remove them?
Once you remove their user permissions, they cannot log into Seller Central. However, if they had SP-API access through a developer app, that access may persist until you explicitly revoke it under Developer authorizations. Always check both.
How often should I audit my Amazon Seller Central security?
Run a full permissions audit every quarter. Also do an immediate audit whenever you stop working with a VA, agency, or freelancer. Set a recurring calendar reminder so it does not slip through the cracks.