Use a Google Cloud OAuth client that is allowed to access the target Gmail or Google Workspace mailbox.