https://marketing-toolbox.org/auth/Recent content in Authentication on Marketing ToolboxHugoenhttps://marketing-toolbox.org/auth/desktop-oauth/Mon, 01 Jan 0001 00:00:00 +0000https://marketing-toolbox.org/auth/desktop-oauth/<h1 id="desktop-oauth-setup">Desktop OAuth setup<a class="anchor" href="#desktop-oauth-setup"></a></h1> <p>Use a Google Cloud <strong>Desktop app</strong> client for native OAuth. The CLI owns its loopback callback; do not create a Web application or enter redirect URIs.</p> <h2 id="configure-a-cloud-project">Configure a Cloud project<a class="anchor" href="#configure-a-cloud-project"></a></h2> <ol> <li><a href="https://console.cloud.google.com/projectcreate">Create or select a Cloud project</a>.</li> <li>In the <a href="https://console.cloud.google.com/apis/library">API Library</a>, enable only the APIs you need: <ul> <li><a href="https://console.cloud.google.com/apis/library/analyticsdata.googleapis.com">Google Analytics Data API</a> for <code>ga4datactl</code>.</li> <li><a href="https://console.cloud.google.com/apis/library/analyticsadmin.googleapis.com">Google Analytics Admin API</a> for <code>ga4adminctl</code>.</li> <li><a href="https://console.cloud.google.com/apis/library/tagmanager.googleapis.com">Tag Manager API</a> for <code>gtmctl</code>.</li> </ul> </li> <li>In <a href="https://console.developers.google.com/auth/overview">Google Auth Platform</a>, complete <strong>Branding</strong> with an app name, support email, and contact email.</li> <li>Under <strong>Audience</strong>, choose <strong>External</strong> for a personal project or users outside a Google Workspace organization. Choose <strong>Internal</strong> only for eligible organization-only users. For an External app in <strong>Testing</strong>, add each signing-in account as a test user.</li> <li>Under <strong>Data Access</strong>, add only the scope or scopes for the access tiers you will use. The <a href="https://marketing-toolbox.org/auth/#credential-precedence">authentication guide</a> lists the exact tiers and scopes.</li> </ol> <p>External Testing refresh tokens can expire after seven days. Personal testing does not require verification or publishing the app to Production.</p>