Hi Todd,
Thank you for reaching out.
From the APIs' perspective in authenticating your API requests, we strongly recommend using
OAuth2 desktop app or web app flow instead of service accounts unless you need a domain-specific feature (for example, impersonation), as mentioned (
Key Point section)
here.
Moving forward, as for whether you can assign read only access to the said service account and for further insight / guidance on the appropriate setup for your requirement, I would recommend that you reach out to the Google API Console instead, via this
link. I hope this helps.
Best regards,
 |
| Peter Laurence Napa Oliquino |
| Google Ads API Team |
|
|
| |

ref:_00D1U1174p._5004Q2FYTtN:ref