We have found a supplier in China that seems good. They want us to connect to there ERP system, which is fine, but to do that they need shopify name and password for the shop. We are of course not very interested in giving the shop password. Is the best way to use a shopify app, is it even possible to connect to a ERP system through an app ?
Could another option be to create an account with limited access ? Not sure what rights are needed to connect to the ERP system though.
Do not give out usernames and password to vendors. It's quite important that you keep your account safe so push back and ask for more clarification on exactly what they need, and why they need it. If they can not answer basic questions like that it will help you decide if that's a vendor to trust going forward. If they come back with reasonable reasons that is helpful too!
ERP providers should not need Admin access however they may need API access. If you do end up making an API key for them do not make it full access. Restrict API access to the bare minimum.