The gate
A new account is inert. It stays inert until Google says otherwise.
Signing up creates a tenant with the status pending_setup. In that state no API key authenticates and no tool runs — the server refuses any tenant that is not exactly active.
The only thing that changes it is a real call to the Admin SDK, impersonating an admin in your own Workspace, returning 200. Nobody here can grant that. You either are an admin of a real Workspace, or you are not.
- Key storage
- AES-256-GCM
- Scopes
- 8, exact
- Admin rights
- None