I don’t see the information in the node description - but quite some time ago, I set up the authenticator node to use the JSON file from the service account and conncted it to Google Sheets. At that time, I was instructed (don’t remember if help forum or where), that in order for this to work, I had to “share” the sheet(s) with knime-connector@tidal-analogy-400616.iam.gserviceaccount.com. I set the scope to google sheet and it worked just fine. I set the scope to now include google analytics but the connector doesn’t recognize any property (completely greyed out). However, when I use ‘interactive’, all of my clients’ properties are listed. So this begs the question, do I need have then share access in their propert(ies)y that I need to access to this same address => knime-connector@tidal-analogy-400616.iam.gserviceaccount.com? Not sure if it’s a different address based on api need (sheets, drive, analytics, ads, etc.), or it’s just the one email to point to? I don’t want to make the request to the client to add if it’s not appropriate to do so, or if another address needs to be utilized.
According to ChatGPT help -
When you switch to interactive OAuth you’re using your personal Google identity—which already has access to that GA4 property—so the connector can list your accounts/properties. A service account, on the other hand, is just another “user” until you explicitly grant it access to your Analytics property.
To fix it:
- In the Google Cloud Console, make sure you’ve enabled both the Google Analytics Admin API and the Google Analytics Data API for your project.
- In the GA4 UI go to Admin → Property Access Management (under the Property column).
- Click the ‘+’ to add a new user, paste in your service‑account’s email address (it’ll look like
my‑project@…gserviceaccount.com), and give it at least the Viewer role. - Back in KNIME, point your Google Authenticator (API Key) to that service‑account JSON again, then re‑run the GA4 Connector—your accounts and properties should now appear. forum.knime.com.
Where it says "my-project@…gserviceaccount.com), this is where I’m wondering if that email is the proper one across all google properties using the authenticator node and service account.
Thank you in advance for you guidance.