Google Analytics says "This email doesn't match a Google Account"
Google Analytics rejects a brand-new service account with "This email doesn't match a Google Account." The fix is unsatisfying: wait a few hours.
You created a service account in Google Cloud, copied its email, pasted it into Google Analytics under Admin → Account access management → Add users, and got back:
This email doesn’t match a Google Account.
The email is correct. The service account exists. The fix is to wait a few hours and try again.
Why this happens
A service account email like reporting@my-project.iam.gserviceaccount.com is a real Google identity, but it lives in your project’s IAM directory first. Google Analytics resolves the email against Google’s account directory, and a freshly created service account (or one in a freshly created project) doesn’t show up there immediately. Until it does, the Analytics UI treats the email as if it doesn’t exist.
There is no setting you missed. You don’t need to grant the service account any extra IAM role for Analytics to find it. The account just needs to propagate.
A few articles suggest calling the Google Analytics Admin API
(accessBindings.create) to add the service account directly,
bypassing the UI. In my testing that path either fails with the same
underlying error or only appears to work because enough time has
passed by the time you’ve set up API access. The propagation delay is
the real cause; the API isn’t a shortcut around it.
What to do
- Confirm the service account email is correct. It should end in
.iam.gserviceaccount.comand match what you see in the Google Cloud console under IAM & Admin → Service Accounts. - Close the Analytics tab.
- Come back in a few hours and add the service account email again. It will be accepted.
That’s the whole fix. Annoying, but consistent.
What not to do
- Don’t recreate the service account. A second one will hit the same delay.
- Don’t recreate the Cloud project. Same problem, plus more setup.
- Don’t grant the service account
roles/iam.serviceAccountUseror any other IAM role hoping it changes anything. Analytics doesn’t check IAM roles before resolving the email.
Related articles
Google Analytics MCP for Claude Code: setup guide
Set up the Google Analytics MCP server in Claude Code. Create a desktop OAuth client, authenticate with gcloud, and query GA4 from any Claude Code session.
Install gcloud on macOS Apple Silicon in 5 steps
Install the Google Cloud CLI on macOS Apple Silicon in 5 steps, then sign in twice — once as yourself, once for Application Default Credentials.
Connect Tableau Server to Claude Code via MCP + PAT
Wire Claude Code into Tableau Server using the official MCP server, authenticated with a Personal Access Token — list workbooks and views from chat.