Back to Support
    Help / Documentation

    Google — Search Console & Analytics

    Create a service account, then grant it access to your GSC and GA4 properties.

    1

    Create Google Cloud Service Account & Download JSON Key

    Go to console.cloud.google.com. Select the Google Cloud project for your domain (or create one).

    Enable the APIs: APIs & Services → Library. Search and enable both:

    • Google Search Console API
    • Google Analytics Data API

    Create the service account: IAM & Admin → Service Accounts → Create Service Account. Give it any name (e.g. analytics-reader). Finish creation without assigning project-level roles.

    Download the JSON key: Click the service account → Keys tab → Add key → Create new key → JSON. The file downloads automatically.

    Select the JSON key type. The file downloads immediately — store it securely and never commit it to version control.

    After creating the key, note the service account email shown in the console (format: name@your-project-id.iam.gserviceaccount.com). You will use this email in Steps 2 and 3. It also appears in the downloaded JSON file as client_email.

    Send after this step: the downloaded .json key file — share securely via an encrypted link or password-protected file, not plain email.
    2

    Grant Google Search Console Access

    Go to search.google.com/search-console and select your property from the top-left dropdown.

    Google Search Console — select your property
    Google Search Console — select your property

    In the left sidebar go to Settings → Users and permissions → Add user.

    Settings — click Users and permissions
    Settings — click Users and permissions
    Users and permissions — click ADD USER
    Users and permissions — click ADD USER

    In the Email address field, enter your service account email from Step 1. Set Permission to Restricted. Click Add.

    Add user — enter the service account email from Step 1
    Add user — enter the service account email from Step 1
    Send after this step: your Search Console property string — either sc-domain:example.com (domain property) or https://example.com/ (URL-prefix property).
    3

    Grant Google Analytics 4 Access

    Go to analytics.google.com. Make sure the correct Account and Property are selected in the top-left. Click the gear icon at the bottom of the left sidebar.

    GA4 Admin — Property settings → Property access management (highlighted)
    GA4 Admin — Property settings → Property access management (highlighted)

    Under Property settings, click Property access management, then click + → Add users.

    Property level required. Adding at Account level only causes a 403 API error — the property will not be readable.

    Enter your service account email from Step 1. Set the role to Viewer. Uncheck “Notify new users by email”. Click Add.

    Property access management — service account added with the Viewer role
    Property access management — service account added with the Viewer role

    Find your Property ID: Admin → Property details. The numeric ID appears in the top-right corner.

    Property details — the Property ID appears in the top-right corner
    Property details — the Property ID appears in the top-right corner
    Send after this step: GA4 Property ID — numeric, e.g. 552041315.

    Complete checklist — everything to send

    ItemWhere to find it
    Google Service Account JSONGCP console → IAM & Admin → Service Accounts → Keys → Create JSON key
    Google GSC property stringThe property name used: sc-domain:example.com or https://example.com/
    Google GA4 Property IDGA4 Admin → Property details → numeric ID top-right corner

    Also see the Cloudflare documentation for Zone ID, Account ID, and API token setup.