How to Request Klaviyo Access for Agency Clients

How to Request Klaviyo Access for Agency Clients

Klaviyo is one of the most powerful email marketing platforms on the market, but its user access system can feel unnecessarily complicated for agencies managing multiple client accounts. Between different user roles, account-level security settings, and confusing invitation flows, getting Klaviyo access from a new client can easily eat up an entire afternoon.

This guide walks you through the exact steps to request Klaviyo access the right way, covers the user role system so you know what to ask for, and shows you the modern OAuth alternative that bypasses the headache entirely.

Klaviyo's User Role System: Know What to Request

Before you even ask your client for access, you need to understand what role you actually need. Klaviyo offers five distinct user roles, each with different permissions.

Owner: Full control of the account, billing, and all settings. This is reserved for your client and should never be granted to an agency.

Manager: Can create, edit, and delete campaigns, flows, lists, and segments. This is the role you want. A Manager can do everything you need for email marketing work without having access to billing or account settings.

Campaign Manager: Can create and edit campaigns, but cannot modify flows or segments. If you only manage campaigns and don't touch automation, this role works, but it's limiting.

Analyst: Can view campaigns, flows, and performance metrics, but cannot make any edits. This role is useful if you need your client to see reports or if you're onboarding a team member who only pulls data.

Viewer: Read-only access with no editing capabilities at all. Use this for stakeholders who just want visibility into metrics.

For most agency work, request Manager role. It gives you full control over campaigns and flows without unnecessary owner-level access.

The Standard Method: Client Invitation via Settings

The traditional way to get Klaviyo access involves your client inviting you as a user. Here's the exact process.

Step 1: Get Your Email Address to the Client

First, decide which email address you want to use for Klaviyo access. This is usually your primary agency email. Confirm it with your client before they proceed.

Step 2: Client Adds You in Settings

Have your client follow these steps in their Klaviyo account: - Log into Klaviyo at klaviyo.com - Click their name in the bottom left corner - Select Account Settings - Click the Users tab (or Team in newer accounts) - Click Invite User or Add Team Member - Enter your email address - Select Manager from the role dropdown - Send the invitation

Step 3: Check Your Email and Accept

You'll receive an email invitation from Klaviyo. Click the link and accept the invitation. You're now a Manager on their account.

The 2FA Blocker: Why Invites Might Fail

Here's where things get tricky. If your client has enabled account-level two-factor authentication (2FA), Klaviyo blocks all user invitations for security reasons. This is a Klaviyo anti-spam measure, but it means your client can't invite you until they disable 2FA temporarily.

If the invitation doesn't send or bounces back, ask your client to: 1. Go to Account Settings > Security 2. Disable Two-Factor Authentication 3. Send you the invitation 4. Re-enable Two-Factor Authentication after you accept

This is annoying, but it's a one-time friction point per client.

User Access vs. Agency Partner Program: What's the Difference?

Klaviyo has a formal Agency Partner Program that's different from just being added as a user. If your agency is certified through Klaviyo's partner program, you can request accounts be managed directly under an agency structure. This is designed for larger agencies and requires Klaviyo approval.

For most smaller to mid-size agencies, the user invitation method (Manager role) is sufficient. The Agency Partner Program is worth exploring if you're managing 50+ Klaviyo accounts, but it's overkill for teams managing under 20 accounts.

The Modern Alternative: OAuth Onboarding

If you want to skip the friction of user invitations, 2FA blocks, and complex role assignments, use OAuth 2.0 integration. Platforms like OneClick Onboard can connect your agency to Klaviyo via API without any of the manual steps.

Here's how it works:

1. Set up OneClick Onboard and add Klaviyo to your integration list
2. Send your client a single onboarding link
3. They click the link and authorize Klaviyo in 30 seconds
4. Your agency has instant, secure access to their account

OAuth eliminates: - The 2FA blocker - Forgotten password resets - Complex role assignment - Email invitations that get lost in spam - The 45-minute Zoom call where you watch your client click buttons

From your client's perspective, it's as simple as "click this link, authorize, done." No password sharing, no account settings navigation, no 2FA drama.

Why OAuth is Better Than User Invitations

If you manage more than 5 Klaviyo accounts, OAuth integration is not optional—it's a time-saving essential.

Speed: OAuth onboarding takes 90 seconds per account instead of the 15-20 minutes of back-and-forth messaging required for manual invitations.

Security: OAuth generates scoped API access tokens without ever exposing your client's actual Klaviyo password. You can revoke access instantly when a client relationship ends, and your client doesn't have to worry about password rotation.

Reliability: No more dealing with clients who ignore emails, skip steps, or accidentally delete their 2FA recovery codes. The OAuth flow is deterministic.

Scalability: Once you integrate OAuth, adding a new Klaviyo account is just sending a link. You're not manually hunting down email addresses or troubleshooting 2FA settings.

See secure client password sharing alternatives for more on why OAuth is the modern agency standard.

Building Klaviyo Management Into Your Workflow

Whether you use manual invitations or OAuth, Klaviyo access should be part of your standard client onboarding checklist. Include it in your SOPs right alongside Google Ads, Meta Ads, and Google Analytics.

Here's a template for your onboarding sequence: 1. Client signs proposal 2. Client grants Klaviyo access (either via OAuth link or manager invitation) 3. Agency reviews existing email setup and audit historical data 4. Agency sets up new flows, segmentation, and campaigns 5. Campaign launches within 48 hours of access granted

That's it. No delays, no friction, just access.

Quick Recap: Manager Role vs. Analyst

• Manager Role (Request this): Can create, edit, and delete campaigns and flows. Full email marketing capability.
• Analyst Role (Only for view-only team members): Can see campaigns and metrics but cannot make changes.

Request Manager. Don't negotiate down to Analyst unless your client specifically wants you to have read-only access.

Getting Started

The setup is simple:

1. Decide which email address you're using for Klaviyo
2. Send your client the steps above, or
3. Use OneClick Onboard for OAuth integration and eliminate the friction entirely

Either way, you should have Klaviyo access within hours, not days. Build it into your standard onboarding flow, and this process becomes invisible.