Permissions and scopes
Packwork requests Shopify scopes for orders, fulfillments, and the Admin UI extension. Each scope maps to a specific feature — we don’t request anything we don’t use.
On the Fulfil side
Packwork uses the API user you provide at install. Limit that user to the resources Packwork needs: shipments, returns, drop shipments, and shipment addresses.