Sign in with your CRM account (role controls what you see).
Admins can still use service token in Admin for MCP. Google: account must exist (or allowed domain).