A service account in Google Workspace is a tool that, among other things, has the ability to reach into a 1Hope Account and access or manipulate information in that account. CIT never uses these features to access or manipulate anything within an account's Google Workspace tools, including your Gmail, Google Contacts, Google Calendar, Google Drive, Google Docs/Sheets/Slides/Forms/Sites. In order to carry out the Privacy and Security section of the Technology Usage Policy, CIT may reset account passwords to gain access to accounts.

That being said, a service account (SA) may be created if:

• CIT’s managers meet to discuss the need of the SA
• SA has a specific, detailed, and narrow scope of what it can do
• SA credentials are stored in CIT's secure password management tool
• The tool is thoroughly documented in CIT tickets
• The end user is onboarded with the tool

For example: If an office manager needs the ability to manage, in bulk, the Gmail delegates on dozens of 1Hope Accounts under their control, CIT may create a Service Account and corresponding tool that only has the ability to manage Gmail Delegates of specific 1Hope Accounts.