We have built a provisioning with google SDK API to create and update employees in google workspace.
We are using a service user without a role and authentication using one of the admin users.
There is an issue, when the admin account we are using is set with COMPLETE API Privileges and in the user payload we are sending “suspended”: true we are getting an error back from google “403 “Not Authorized to access this resource/api” “.
If we change the admin account to SUPER ADMIN its working correctly and we are not getting an error.
We have tried cloning the Super Admin permissions, and set the admin account with the cloned permission yet again we are getting the same error.
Can anyone assist with understanding why its happening or how to overcome this issue?
Related
Created a google project in Google Developer Console to have the necessary API credentials.
Configured OAuth2.0 API credentials in OAuth consent screen.
To get the Refresh token and Access token from https://developers.google.com/oauthplayground/
I got Authorization Error - 403 Access Denied when I tried to Authorize API
Authorization Error
Error 403: access_denied
The developer hasn’t given you access to this app. It’s currently being tested and it hasn’t been verified by Google. If you think you should have access, contact the developer (dummyemail#gmail.com).
Learn more
Any suggestions would be great.
Follow the following steps: -
Go to console screen
Select +Add Users
Enter your email in it.
Save it and you are good to go.
I had a Google account based on not-GMail-account. I had another email company's email as a login to my Google Account (myemailhere#ukr.net). And I used this Google account to login the dialogflow.cloud.google.com.
Today Google suggested me to create a #gmail.com account and attcach it to my myemailhere#ukr.net Google Account. I have confirmed and created the myemailhere#gmail.com.
Using both of this logins (myemailhere#gmail.com and myemailhere#ukr.net) I am still able to login my cloud.google.com Profile. But when I try to login the Dialogflow Profile (dialogflow.cloud.google.com) - I see the eternal loading animation (or a totally blank page). There is no errors about password or something like this. Just login process after I submit the password and then white page. This behavior I see on all my devices, while I trying to login with myemailhere#gmail.com or myemailhere#ukr.net
And I see some 400 errors in web console (if it matters).
Could you please help me to fix this and get access to DialogFlow?
Screen that I see after the login and password entering
Do you have the project owner role for the mentioned username that is registered on your project in the GCP console (not Dalogflow Console)? Here is a list of roles related to Dialogflow that grant access to its Console.
Note that some of these roles give full access or edit access while other roles have permissions that simply gives view access to the Dialogflow Console.
If you are missing any of these then simply assign on your GCP project's console.
Assigning roles as described above did not work for me. Solution was to delete gmail email service from the account.
Instructions here
If you would like to use gmail, do NOT add gmail to your existing google account. You should instead create a seperate google account and use gmail from this seperate account
I'm getting a 403 when I try to post a message in teams via postman. It works via graph explorer with the same account. Clearly I have a permissions issue but I can't for the life of me find the right check box.
My app is registered and approved by admin. I got it approved by MS to make protected api calls as well for teams.
I can get a token on behalf of a user in postman, I can use that token to get the messages in a channel, but cannot post.
Here are the api permission:
Delegated Permissions
My local Django app has an admin account, which I can successfully login to. However, when I deploy this app to the Google's Cloud by following this tutorial; I get the photographed error. How can I fix this?
I'm developing an application for a seller at Amazon, using Marketplace Web Service API (MWS).
The seller has created an account for managing his inventory, and says that he assigned the necessary permissions.
However, clicking "Sign up for MWS" button on https://developer.amazonservices.com/ results in permission error: "Insufficient user rights."
Can anyone clear up what permission(s) Amazon Marketplace requires for accessing their API, or at least provide a list of all possible permissions?
I found the answer. It has actually turned out that you can't sign up for Amazon MWS from a sub-account. No such permission exists, so this must be done by the owner.