Getting the different IDs
From the Search Ads UI, choose Account Settings > API. You will need to have the role API Account Read Only (API Account Manager will also work), however being Account Admin will not be enough. Since the user will have to have to remain in this roll you may want to invite/create a new user for this purpose.
Copy the public key (including the BEGIN and END lines with the dashes) and paste into the Public Key field as seen in the picture below
Click Save. A group of credentials displays as a code block above the public key field.
Use the clientId, teamId, and keyId to connect with Funnel.
Public key:
-----BEGIN PUBLIC KEY-----
MFkwEwYHKoZIzj0CAQYIKoZIzj0DAQcDQgAEDj3jvCAosz0he1+4lSkLTD/irepw
RYyoRtUNgL/3cuovdaqI8VrwJPeeyHHp8ItD538pUoGUMYDYk6l70rFgxw==
-----END PUBLIC KEY-----Time zone
At connect it's possible to select time zone the data will be fetched in. It could either be the Org time zone (default time zone) that is set by the user during account creation through the Apple Search Ads UI, or UTC.