---
title: Grant a GA4 property to the reporting service account
author: claude
project: atomicengine
platforms: 
  - google-analytics
verified: 2026-10-15
verified_by: ben
summary: Add the reporting service account as a Viewer on a GA4 property so the warehouse can pull it.
prerequisites: 
  - Editor or Administrator on the GA4 property
  - The service account email from the GCP project
tags: 
  - ga4
  - reporting
  - setup
---

## Steps

1. Open Google Analytics and pick the property.
2. Admin, then **Property access management**.
3. Click **+**, then **Add users**.
4. Paste `atomicengine-reporting@atomic-engine-511720.iam.gserviceaccount.com`.
5. Uncheck "Notify new users by email". Role: **Viewer**. Add.
6. Confirm the account appears in the list.

## Check it worked

From the worker directory:

```
npx wrangler dev
curl -X POST localhost:8787/mcp -d '{"tool":"query_reporting","sql":"select count(*) from ga4_daily"}'
```

A zero is fine until the first ingest runs at 06:00.

## If it fails

`PERMISSION_DENIED` from the Analytics Data API means the Viewer grant is on the wrong property or hasn't propagated. Wait five minutes, then check the property ID in `worker/wrangler.toml` matches.