Third Party Developer Access - GDPR

[Andy_Acute]

Hi all

I hope this is the correct section to post this question.

With GDPR in place and for general security and privacy reasons, how does everyone else deal with giving third party extension developers access to your admin?
This would give access to all customer details etc.

How do you deal with it?

Thank you in advance

Andy

[theMageComp]

Hello @Andy_Acute 

If you are store owner, its up to you if you want to provide the details to extension vendor or ask them for remote access help.

Being Extension development Agency, sometimes customer don't give us the details for any type of support, so we have to schedule a time with them for remote support.

Other thing, working with most of the reputed agencies, you may not have to worry about the security as they know the importance of it very well. About customer's data, you can give them limited rights for admin user.

Those type of security practices will keep you secure and your data as well.

[Rahul Gupta · Accepted solution]

Hi @Andy_Acute 

As @theMageComp  suggested you can ask for remote access but if there is a need to share the account then instead of sharing the admin account you are using you can create a new one with limited access related to extension settings only.

So when they login with this account,then they can see the portion for which you have provide the access to them rest part is hidden.

Thanks

---
If you've found my answer useful, please give"Kudos" and "Accept as Solution".