Required permissions for accessing non-PII aggregated data

[KyleG-Shopify]

Hey @gabe1,

Level 2 customer data access is required for all shopifyqlQuery calls, even when your query doesn’t touch PII. Another developer ran into this:

Access denied for shopifyqlQuery

Hi @Dylan & @Daniel_Friis, You’re right in that your app need Level 2 customer data access today, even if that query doesn’t specifically query customer data. Access to Analytics via shopifyqlQuery provides access to all Analytics right now and granular scopes are not applied to the various different entities. For example, having only read_products won’t limit your Analytics responses to only products/variants data. This is something we’re aware of and will likely look to refine over time to …

Short answer: shopifyqlQuery grants access to all Analytics data. Granular scopes don’t apply to different data types. Since customer data can be accessed through some ShopifyQL queries, Level 2 is required for all of them.