Providing an agent delegate access to an email

[ColeClifford]

I have a work email (e.g. user@company.com) and an agent email (e.g. agent@company.com). My goal has been to setup the agent as a delegate for my email since this seems to cover a bunch of the ideal permissions separation.

The agents email has already been configured to be a delegate through these steps, meaning I can properly see my email through the GMail webpage. However, the agent email can't send as my email through the API.

Any documentation I can find is either outdated (pages in Console no longer exist) or mention a domain-wide configuration that would allow the agent to send as any employee in the company.

Has anyone been able to properly setup delegation? Am I overthinking this and there is a better path?

>>> gws gmail users messages list --params '{"userId": "user@company.com", "maxResults": 1}'
{
  "error": {
    "code": 403,
    "message": "Delegation denied for agent@company.com",
    "reason": "forbidden"
  }
}