Users can access their Google Storage even if the Advanced Protection Program is activated if Cyberduck/Mountain Duck is set as an exception in the API access settings.
Steps below adjusted from the Google Workspace Admin Help page
- Sign in as an administrator to the Google Admin console.
- Navigate to Security → Access and data control → API controls
- Click on Manage App Access
- Click on Configure new app
- Add Cyberduck
- Set it to Trusted and API Block Exempt