Get Access Report - Markifact

Reports who read a Google Analytics 4 property’s data and how often, by user, access mechanism, report type or app, for audits and quota monitoring. Google serves this report for GA4 360 properties only; standard properties get a clear refusal.


App	GA4
Operation ID	`ga4_get_access_report`
Type	Action
Connection	`ga4` (required)
Credits per run	1
Agent / MCP tool	Yes

Inputs

Field	Type	Required	Default	Description
`account`	array (also accepts a comma-separated string)	No	-	The GA4 property whose data access records to read. Google serves this report for GA4 360 properties only. Only one property at a time.
`time_range`	string or SelectableOption	No	-	Period to cover: ‘last_30_days’ (default), ‘last_14_days’, ‘last_7_days’, ‘today’ or ‘yesterday’. Google keeps access records for up to 2 years.
`dimensions`	string or array of string	No	-	Access report dimensions, default [‘userEmail’, ‘accessMechanism’]. Options: userEmail, accessMechanism, reportType, accessorAppName, accessDateHour, epochTimeMicros, mostRecentAccessEpochTimeMicros, userCountry, userCountryId, userIP, accessedPropertyId, accessedPropertyName, costDataReturned, revenueDataReturned, dataApiQuotaCategory.
`metrics`	string or array of string	No	-	Access report metrics, default [‘accessCount’]. Options: accessCount, dataApiQuotaPropertyTokensConsumed.
`limit`	integer	No	`100`	Maximum rows to return (1 to 100000, default 100), ordered by the first metric descending.
`include_all_users`	boolean	No	-	Also list users with access who never read data (admin only).
`expand_groups`	boolean	No	-	With include_all_users, list the members of user groups individually.

SelectableOption

Field	Type	Required	Default	Description
`value`	string	Yes	-
`label`	string	Yes	-

Output

Type: List[Dict] Returns one row per dimension combination with the requested metrics (accessCount, dataApiQuotaPropertyTokensConsumed). Fields: dynamic (depend on the inputs)