Agent Manager
Sign in with your work Google account. The same step connects your Gmail and Drive, so agents act as you and never see anyone else's mailbox.
Any Google account may request access. If sign-in is refused by Google itself, this installation is restricted to one organisation and an administrator has to widen it.
Approval by an administrator is required before a new account can do anything.