This article describes
Recommended Approach for GAE Account Owners: Only an owner of the GAE can log directly in to the GAE account. When logging in to a GAE, it is recommended to use an incognito/private browser session to avoid cookie/session issues across user sessions and apps.
To access a GAE account as an owner,
Recommended Approach for GAE Account Users (non-owners): To access a GAE account as a non-owner, you must first be assigned delegation rights to the GAE account by the owner. GAE account owners can configure and check delegation settings by following the steps outlined by Google at:
New delegates will be sent an email that they will need to approve (link provided in email), after which they will gain access. This can take several hours to propagate through the system. We recommend that we set your own account up as a delegate, so you don't need to log in to the GAE directly for Gmail access. You, as a delegate, will see your delegated access to the GAE’s Gmail in the top right by clicking on your icon/avatar. Delegated accounts display below your VT profile image. Once you are configured as a delegate, follow the steps below to access the GAE account:
What if I have any problems accessing my GAE account using a mail client, such as the Outlook desktop app?
POP and IMAP connections do not support two-factor authentication. If you were using this method previously, your client will not function. We highly recommend that you use a Web browser to check your GAE account instead to gain the best security benefits. However, if you are the owner of the GAE account and you still want to use a specific mail client to access your GAE account, you can create a unique application password for the GAE account following the steps in KB0011619.
GAE delegates are not able to use a POP/IMAP connection with a mail client to check GAE accounts. GAE delegates should only use the Web browser approach listed above.
The flowchart below provides a visual reference to determine which approach for account access may be appropriate for you or your users.
Links from above image:
If you need to create a unique application password based on the PDF guide, we recommend you take a look at KB0011619.
Google Workspace Program Search Term: GWP