Connect Google Analytics 4

1Find your Property ID

• In GA4, open Admin → Property → Property Settings. The numeric Property ID is shown top-right (e.g. 987654321).
• Don't confuse it with the G-XXXXXXX measurement id — picoask needs the numeric property id.

2Create a service account

GA4's Data API authenticates with a Google Cloud service account — no OAuth dance, no tokens to refresh.

• In Google Cloud Console → IAM & Admin → Service accounts, create a service account in any project you control (a name like picoask-ga4-reader keeps it obvious).
• Enable the Google Analytics Data API for that project (APIs & Services → Enable APIs).
• Open the service account → Keys → Add key → Create new key → JSON, and download the key file.

3Grant it access to the property

• Copy the service account's email (it ends in .iam.gserviceaccount.com).
• In GA4 Admin → Property → Property access management, add that email with the Viewer role. Viewer is enough — picoask only reads.

4Connect in picoask

In your project's Integrations tab, choose Google Analytics 4 → Connect and fill in:

• Property ID — the numeric id from step 1.
• Service account JSON — paste the entire contents of the key file from step 2, unmodified.

picoask validates access against the GA4 Data API before saving. The key is stored encrypted and used only by the sync worker.

5Troubleshooting

• PERMISSION_DENIED — the service-account email hasn't been added to the property (step 3), or it was added at account level on the wrong account.
• API not enabled — the Google Analytics Data API isn't enabled in the service account's Cloud project.
• Invalid JSON — the pasted key is truncated or reformatted. Paste the raw file contents, including the surrounding braces.
• Property not found — a measurement id (G-…) or account id was entered instead of the numeric property id.