Kiosk account
The owner is the only Google account allowed to sign in to this kiosk.
Resetting clears it; the next sign-in becomes the new owner.
Google account
Not connected
Create an OAuth Client ID at console.cloud.google.com
(Web app) and add this kiosk's URL as an authorized origin.