Hi Aryeh, Thanks for your response. I had already seen the documentation Setting up service account access <https://developers.google.com/google-ads/api/docs/oauth/service-accounts#setting_up_service_account_access> that you linked to but I can't see anywhere that it discusses the domain of the account that is impersonated.
In any case, it appears that this is the disconnection in my setup. So if I authorize i...@mydomain.com to the Manager Ad Account, and use this email in the $sub field when I generate the Access Token will that solve my issue? Regards, Martin On Friday, August 26, 2022 at 10:42:32 PM UTC+3 adsapi wrote: > Hi Martin, > > A service account can only be used with the Google Accounts in the > mydomain.com space, you cannot impersonate a @gmail.com Google account > that is not in the @mydomain.com domain with a service account. The 'sub' > field can only be filled with a Google Account that is in the Google > Workspace domain. here is the note under Setting up service account access > <https://developers.google.com/google-ads/api/docs/oauth/service-accounts#setting_up_service_account_access> > that > explains this. > > If the above doesn't help, could you send us your JWT claim set and a > 'DEBUG' log level request and response log of raw API communications that > gets you this error? > > The request and response appears similar to the JSON Mappings in our REST > documentation > <https://developers.google.com/google-ads/api/rest/design/json-mappings?hl=en> > with > additional headers and information such as request Id > <https://developers.google.com/google-ads/api/docs/concepts/call-structure#request-id> > . > > If you are using our REST interface > <https://developers.google.com/google-ads/api/rest/overview> then the > full multi line curl command line is a request log and adding curl command > line option '-i' will also generate a response log. > > You may send the requested information via "Reply to author" or via > googleadsa...@google.com > <https://mail.google.com/mail/u/0/?fs=1&tf=cm&source=mailto&to=googleadsapi-supp...@google.com> > with > a link to this forum post added to the new thread. > > Regards, > > [image: Google Logo] > Aryeh > Google Ads API Team > > > ref:_00D1U1174p._5004Q2do6N4:ref > -- -- =~=~=~=~=~=~=~=~=~=~=~=~=~=~=~=~=~=~=~=~=~=~=~=~ Also find us on our blog: https://googleadsdeveloper.blogspot.com/ =~=~=~=~=~=~=~=~=~=~=~=~=~=~=~=~=~=~=~=~=~=~=~=~ You received this message because you are subscribed to the Google Groups "AdWords API and Google Ads API Forum" group. To post to this group, send email to adwords-api@googlegroups.com To unsubscribe from this group, send email to adwords-api+unsubscr...@googlegroups.com For more options, visit this group at http://groups.google.com/group/adwords-api?hl=en --- You received this message because you are subscribed to the Google Groups "Google Ads API and AdWords API Forum" group. To unsubscribe from this group and stop receiving emails from it, send an email to adwords-api+unsubscr...@googlegroups.com. To view this discussion on the web visit https://groups.google.com/d/msgid/adwords-api/881b8e20-974f-4c49-9ff6-42439e39c716n%40googlegroups.com.
