Everything the system watches. The tracking list, the Search Console properties this account can read, and the domains this host serves — kept apart, because a domain in one and not another is a gap rather than a duplicate.
Sign in
This page lists every site the system touches. Sign in with the Google account on the administrator list.
The page itself is a static file anyone can open. What is protected is the data: the analyzer verifies Google’s signature on your sign-in and refuses every request that is not from an address on the list.