How to Give a VA Access to Your eBay Store Without Sharing Your Password

You hired an ops VA. Their first task is this morning's orders, and their first blocker is you: they can't touch anything until they can get into the account. So you search for how to give a VA access to your eBay store without sharing your password, and you find good news: eBay has a real, native permission system called Team Access. Then you hit the eligibility line, and there's a real chance it doesn't apply to you or to the VA you just hired.

Here's the full version. I'll walk through Team Access properly, because when it's available it's genuinely good. Amazon's User Permissions gets the same treatment, since your VA doesn't live on one channel. Then I'll cover the two gaps: the country rules that keep many sellers, and almost every overseas VA, out of eBay's system entirely, and the supplier-and-spreadsheet layer between your channels that no permission system covers at all.

How do you set up eBay Team Access for a VA?

Team Access is eBay's built-in way to run your seller account as a team. It used to be called Multi-User Account Access, so older forum threads call it MUAA; same feature. Per eBay's Seller Center page, the setup:

1. Open the Team Access page from your account settings in My eBay.
2. Invite your VA by name and email. Have them watch for it: eBay's help page says an unaccepted invitation expires after 24 hours.
3. Your VA needs an eBay account under that email (they create one if they don't have it), and they must enable 2-step verification before they can act on your account.
4. Grant permissions. eBay groups them into five sets: Orders, Listings, Marketing, Research, and Messaging, and you can grant a whole group or individual permissions inside one.

The individual grants are where this gets genuinely useful for an ops VA. Inside Orders you can allow viewing orders, downloading order reports, adding shipping tracking, printing shipping labels, and managing refunds, requests, and disputes. Listings splits creating and editing drafts from publishing and revising live listings. Marketing covers promotions and ad campaigns, Research covers product research, and Messaging covers buyer messages.

And the boundary eBay draws for you: team members never get access to your personal, business, or bank information, or to account administration and advanced settings. Your VA works the orders; your payout details stay yours. When they leave, you remove them from the Team Access page instead of resetting a password that half your business runs through.

Who is actually eligible for eBay Team Access?

Here's the part that surprises people, and it's the reason this article exists in this form.

Team Access is currently available to sellers registered in three countries: the USA, the UK, and Germany. And there's a second condition that bites harder: the team member you invite must be registered in the same country as you, the account owner. Both rules come from eBay's own descriptions of the feature, echoed in eBay's community mentor answers; treat them as eBay's current stated eligibility, and check the live help page before you plan around them.

Play that out against how sellers actually hire. A US-registered seller with a VA in the Philippines, or a UK seller with an assistant in India, is exactly the normal case, and Team Access can't cover it: the VA's eBay account is registered in the wrong country. A seller registered outside those three countries has no native option at all. Either way, the most common way to share eBay seller account access with a VA ends up being the worst way: the master login, sent over WhatsApp.

That's worth being precise about, because the master login isn't a scoped grant. Whoever holds it can see and change everything the owner can, nothing they do is attributable to them, and the only way to revoke it is a password reset that also logs out the owner and anyone else using it. A careful permission setup on Amazon next to a shared master login on eBay isn't half-safe. It's theatre.

If Team Access is closed to you, the honest play is to shrink what the login is needed for at all. More on that below, because the same move fixes the layer that no channel's permission system covers.

How do you set Amazon Seller Central user permissions for a virtual assistant?

Amazon's version lives in Seller Central under the settings gear, in User Permissions. The flow, as covered in My Amazon Guy's guide to user permissions and Amerge's step-by-step walkthrough:

1. Open Settings (gear icon), then User Permissions.
2. Click Add User, enter your VA's name and email, and send the invite.
3. Your VA accepts the invitation and creates their own login credentials.
4. Back in User Permissions, click Manage Permissions next to their name and grant access section by section.

Each section gets one of three levels: None, View, or View & Edit. For an ops VA handling fulfillment, that typically means View & Edit on Manage Orders, and View on the reports they need for reconciliation. Advertising and inventory settings are separate grants; give either only if that's actually the VA's job.

What you keep for yourself: everything under banking and deposit methods, along with tax and legal entity information. The User Permissions page itself stays with you too. Amazon lets you designate a secondary user as an admin who can manage other users' permissions. Don't do that for a VA. Admin on the permissions page is effectively the keys to the account.

One more Amazon-specific note: your VA signs in with credentials that belong to them, not to you. If their laptop is ever phished, the attacker lands in a permission-scoped secondary user, not in your root seller account. Notice that Amazon asks nothing about where your VA lives; that's the contrast with the eBay side.

Which permissions does an ops VA actually need?

This is the part most owners get wrong in the generous direction. The question is never "do I trust them?" It's "what does the job require?" That's the entire discipline behind ecommerce team roles and permissions: grant by job, not by trust, because trust doesn't stop a phished laptop.

For an eBay+Amazon seller doing 20-200 orders a week, an ops VA's job is usually: work the day's orders, chase tracking, answer buyer messages and WISMO email, flag problems. Map that honestly and you get:

• eBay (where Team Access is available to you): the Orders group, or its individual grants: view orders, add shipping tracking, print shipping labels, manage refunds and requests. Add Messaging if they answer buyers. Add Listings only if they edit listings, and even then consider drafts-only before publish rights. Nothing in Marketing unless they genuinely run your promotions or ads.
• Amazon: View & Edit on Manage Orders. View on relevant reports. None on Advertising unless they run your ads. None on anything touching money movement or account settings.

When the job grows, widen the grant. Widening a permission takes a minute; investigating what a too-broad account touched takes a week.

Why does a careful permission setup still leave a hole?

Set up both channels perfectly and your VA still can't do their job. At 20-200 orders a week, an ops VA doesn't live only in Seller Hub and Seller Central. They live in the supplier account that places and pays for orders, and in whatever pushes tracking numbers back onto each channel. None of that came with a roles screen.

Here's how it typically plays out for a seller doing 100 orders a week. The owner sets up Amazon's User Permissions carefully, even qualifies for Team Access and scopes it to the Orders group. Then Monday's orders need placing on AliExpress, and a personal AliExpress buyer account has nothing like a permissions screen. So the owner sends the VA the AliExpress login. Over WhatsApp. The account with the saved payment method, the one that actually spends money, is now a shared credential, and the carefully scoped grants next to it are theatre. Sellers ask versions of this in Amazon's own Seller Forums, and for the between-channels layer the honest answer has been: there isn't a permissions screen for that part.

If you're running this stack today, without any new tool, here's what actually helps:

• Inventory the third layer. Write down every login your VA holds that isn't a scoped account: supplier accounts, courier portals, the shared inbox, the spreadsheet. That list is your real exposure, not your permissions table. If you're an eBay seller outside Team Access's eligible countries, the master login belongs on this list too.
• Keep money approval with the owner. Let the VA prepare supplier orders and queue them, and keep the payment step, or at least the payment method, under your own login wherever the supplier allows it.
• Use a password manager for anything genuinely shared, so you can rotate one credential in one place the day someone leaves, instead of trying to remember which passwords they knew.
• Prefer tools where the VA is their own user. Every system where your VA signs in as themselves is a system where offboarding is one click and actions have an owner. Every shared login is a system where offboarding means rotating a password and hoping. If your supplier ordering runs through automation instead of manual logins, the shape of the problem changes; we've written about that side separately in our guide to dropshipping automation software.

How DS-Mate handles this

This third layer is one of the reasons DS-Mate exists, so here is concretely what it does, and just as concretely what it doesn't.

DS-Mate connects your eBay and Amazon stores (each through its own OAuth authorization, against your own seller accounts) and sits across them as one operations dashboard. Access to that dashboard works by invitation, not by shared login, and the invitation is scoped to a store record, whichever channel the store is on: it works the same for an eBay store as for any other connected store. One caveat before the walkthrough: guest invites need a paid plan. The Free plan can't invite guests, and invites stay blocked while your account is on a trial.

The flow starts with the VA, not with you: they sign up for their own DS-Mate account first. Then, from Settings, then Stores, you click Invite Guest, pick the store the invite is for, and enter the email their account uses. Those are the invite's only inputs, a store and an email; there is no counterpart to Team Access's country rules, and the invite doesn't ask where you or your VA are registered. The invitation shows up inside their own dashboard, under Settings, then Stores, in the Store Invitations panel, and they accept it there. The store then appears in their dashboard with a Member badge. What they get is a guest seat on that one store, and it's read-only: they can see the store's orders, products, and tracking under their own identity, and they can't take destructive actions or touch your settings.

The scoping is per store. A guest sees only the stores you invited them to, never your whole account. If you run three stores and your VA works one, they see one.

Offboarding is one click. On the Guests tab under Settings, Stores, you hit Remove, and their access to that store ends immediately. No password rotation, no wondering what else they could still open.

On accountability, here is exactly what you get, no more: each invitation carries a timestamped status (Pending, Accepted, Rejected), and the Guests tab lists each guest, the store they can access, and the date they joined. It is not a per-action change history, and I won't pretend it is one.

On the supplier side: DS-Mate's AliExpress connection is an OAuth authorization. You approve it on AliExpress's own authorization screen, from your own account, and ordering and tracking updates inside DS-Mate run on that authorization rather than on a password anyone has to share. The authorization does expire periodically; DS-Mate warns you ahead of time, and you re-run the Connect flow to refresh it.

And the honest boundary: DS-Mate does not replace eBay's Team Access or Amazon's User Permissions. Where they're available to you, set them up exactly as described above. What DS-Mate scopes is access to its own view of your connected stores: the orders, tracking, and product state a VA needs eyes on all day. If that's the wall you're hitting, DS-Mate is built for it.

Frequently Asked Questions

Common questions from sellers giving a VA access across eBay and Amazon:

The one thing to remember

Your access model is only as strong as the layer that doesn't have one. For an eBay+Amazon seller that means two checks, not one: whether eBay's Team Access is even available for your registration country and your VA's, and what's living in the middle, the supplier login and everything else that never got a roles screen. Set up the native permissions you can get today, scoped to the job. Then go shorten the list of passwords your VA holds, because that list is the real access model.

We're pre-revenue and onboarding our first 10 pilots. If you're an eBay+Amazon seller in the 20-200 orders/week range hitting this wall, we'd love to learn from your version of it: ds-mate.com.