Hi,
I have multiple accounts on my plus store.
Some of the products variants are deleted/updated by someone.
How to identify who made these changes. Please let me know.
That is less than ideal about your products being deleted, I am sorry to hear about that.
One thing you can try, is to put /activity on the end of your admin URL. So it would be like yourshopifystoreurl.com/admin/activity. This will allow you see a sort of activity log of any changes that were made on the store by users. You can see this in my screenshot below, where I created a test product and then deleted it.
You mentioned you were on the Plus plan - you can also feel free to reach out to Shopify Support, and we can see about getting more information for you on changes that were made to the store. Not all information can be retrieved, however we can try our best to find out what might have caused this.
Is it possible that maybe an app was able to make those changes, or that you recently uploaded a Products CSV file which accidentally deleted products?
Hi Rick-- I suspect my client’s former marketing agency did some malicious activity before their last day and we’d like to prove it was them in order to take legal steps. Would this work in identifying who exactly made the changes?
Hi, @jrmshop .
Thanks for joining the thread!
Any actions that are taken in the Shopify admin by a store owner or a staff member are recorded in the Store activity log. Each event includes the date and the time that the event occurred, as well as the person, app, or channel that took the action. Some examples of store activity might include the following actions being taken: Deleting a product, changing a store setting and granting store access to an app. You can go to Settings > Store activity log for a list of recent actions taken in your Shopify admin. A maximum of 250 results can be displayed on the page.
On a Plus store the first place to check is the store activity log (Settings, then look for the log under your account or organization settings). It records logins and some admin actions per staff account, but here is the catch: it does not record product-level field changes, so you will see that someone was in the admin, not that they changed a variant price. Two more things to check: Apps. Many product-change mysteries are actually a sync or feed app rewriting data on a schedule, so review which installed apps have write_products access. And collaborator accounts from agencies count as staff too, audit those. Longer term, tighten staff permissions so only people who need product edit rights have them. Being upfront: Shopify’s API does not expose WHO made a change, even to apps, so no tool can name the person. We built Restory to at least record every product change with before and after values and let you revert them, because we hit this exact wall with a client. Field-level history plus tight permissions is the practical fix.