Returns the Google Service Account associated with the enterprise.

Returns the Google Service Account record used for server-to-server authentication with Google's EMM APIs on behalf of the tenant.

About Google Service Account Some Google EMM operations require server-to-server authentication via a Google Service Account rather than a user-facing OAuth flow. This endpoint exposes the service account record Esper has stored for the tenant's Google Enterprise.

Common Use Cases

• Confirming a Google Service Account is configured before relying on server-to-server EMM operations
• Auditing which service account is currently active for a tenant
• Troubleshooting EMM automation failures that may stem from a missing or inactive service account

Best Practices

• Check is_active status when troubleshooting EMM automation issues
• Treat the service account's data/public_data fields as sensitive credential material
• Create a new service account via POST if none exists or the current one needs to be rotated

Workflow

1. GET this endpoint to check for an existing, active service account
2. If none exists or it needs rotation, POST to create a new one
3. Confirm the new account is active before relying on it for automation