RE: AuthorizationError.USER_PERMISSION_DENIED Error

[Google Ads API Forum Advisor Prod]

Hi Muthukumar,

Thank you for reaching out to us. I see you're encountering a 
USER_PERMISSION_DENIED error. Could you provide us with the full request and 
response logs for where you encounter this issue so that I may further 
investigate? You can reply using "reply privately to author" for privacy.

Thank you,

Bryan Li
Google Ads API Team
ref:_00D1U1174p._5004Q23wVN6:ref

-- 
-- 
=~=~=~=~=~=~=~=~=~=~=~=~=~=~=~=~=~=~=~=~=~=~=~=~
Also find us on our blog:
https://googleadsdeveloper.blogspot.com/
=~=~=~=~=~=~=~=~=~=~=~=~=~=~=~=~=~=~=~=~=~=~=~=~

You received this message because you are subscribed to the Google
Groups "AdWords API and Google Ads API Forum" group.
To post to this group, send email to adwords-api@googlegroups.com
To unsubscribe from this group, send email to
adwords-api+unsubscr...@googlegroups.com
For more options, visit this group at
http://groups.google.com/group/adwords-api?hl=en
--- 
You received this message because you are subscribed to the Google Groups 
"AdWords API and Google Ads API Forum" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to adwords-api+unsubscr...@googlegroups.com.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/adwords-api/YFh0h0QG1GGJ00YpI1lYVuSEWTIqroHdEiEA%40sfdc.net.

AuthorizationError.USER_PERMISSION_DENIED Error

[Muthukumar Mohan]

Team,

Seeing the following error in our Python code:

INFO:googleads.soap:Request made: Service: "CustomerService" Method: 
"getCustomers" URL: 
"https://adwords.google.com/api/adwords/mcm/v201809/CustomerService";
WARNING:googleads.soap:Error summary: {'serviceName': 'CustomerService', 
'operations': '0', 'faultMessage': 
"[AuthorizationError.USER_PERMISSION_DENIED @ ; trigger:'']", 
'methodName':
'getCustomers', 'requestId': '0005ae3f9106f35c0ac12f784c04cd11', 
'responseTime': '121'}

This is Production account which was working for more than a year and 
suddenly started failing.
Any ideas?

-- 
-- 
=~=~=~=~=~=~=~=~=~=~=~=~=~=~=~=~=~=~=~=~=~=~=~=~
Also find us on our blog:
https://googleadsdeveloper.blogspot.com/
=~=~=~=~=~=~=~=~=~=~=~=~=~=~=~=~=~=~=~=~=~=~=~=~

You received this message because you are subscribed to the Google
Groups "AdWords API and Google Ads API Forum" group.
To post to this group, send email to adwords-api@googlegroups.com
To unsubscribe from this group, send email to
adwords-api+unsubscr...@googlegroups.com
For more options, visit this group at
http://groups.google.com/group/adwords-api?hl=en
--- 
You received this message because you are subscribed to the Google Groups 
"AdWords API and Google Ads API Forum" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to adwords-api+unsubscr...@googlegroups.com.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/adwords-api/50f56ea0-6f22-43bb-97c9-0eecb835963dn%40googlegroups.com.

RE: Sample returning AuthorizationError.USER_PERMISSION_DENIED error

[Google Ads API Forum Advisor Prod]

Hi Josh,

Thank you for reaching out to us. I see that you're encountering a 
User_Permission_Denied error. This means that there's either no link between 
the manager account and customer account that you're querying or that your 
OAuth client credentials haven't been given access to the manager account.

If the issue is the former, you can either use ManagedCustomerService via the 
API or use the UI to create a link between your manager account and customer 
account. If the issue is the latter, you can check your client credentials 
access by logging into your manager account in the UI, then go into "Tools and 
Settings" > "Setup" > "Account Access". Under the "Users" tab, the email 
associated with your client credentials should be listed. If it is neither of 
these issues, could you please provide me with your SOAP request and response 
logs where this issue occurs so that I may further troubleshoot this issue?

Thank you,
Bryan, Google Ads API Team
ref:_00D1U1174p._5001UXX7bf:ref

-- 
-- 
=~=~=~=~=~=~=~=~=~=~=~=~=~=~=~=~=~=~=~=~=~=~=~=~
Also find us on our blog:
https://googleadsdeveloper.blogspot.com/
=~=~=~=~=~=~=~=~=~=~=~=~=~=~=~=~=~=~=~=~=~=~=~=~

You received this message because you are subscribed to the Google
Groups "AdWords API and Google Ads API Forum" group.
To post to this group, send email to adwords-api@googlegroups.com
To unsubscribe from this group, send email to
adwords-api+unsubscr...@googlegroups.com
For more options, visit this group at
http://groups.google.com/group/adwords-api?hl=en
--- 
You received this message because you are subscribed to the Google Groups 
"AdWords API and Google Ads API Forum" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to adwords-api+unsubscr...@googlegroups.com.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/adwords-api/nxTQc0Q80TI500fdh4iXgcSyib7EZJiKlpLg%40sfdc.net.

Sample returning AuthorizationError.USER_PERMISSION_DENIED error

[Josh Ratliff]

I'm working through the sample listed here: 

https://developers.google.com/adwords/api/docs/guides/first-api-call

Let's get a few initial things out of the way. The dev token has been 
approved for production use. All of the APIs (as far as I'm aware) are 
enabled. 

I think the problem is I work for an agency that manages ads for our 
clients, so the walk through is slightly wrong for what I need it to do. 
I'm trying to pull data from one of our clients, and I'm hitting the 
AuthorizationError.USER_PERMISSION_DENIED error. I'm not sure if I need to 
use a different oauth account, if the client needs to do something, or 
something else. Here's a copy of my .yaml file


Can someone help me understand what needs to happen so I can become 
unblocked? Thanks.

Josh

-- 
-- 
=~=~=~=~=~=~=~=~=~=~=~=~=~=~=~=~=~=~=~=~=~=~=~=~
Also find us on our blog:
https://googleadsdeveloper.blogspot.com/
=~=~=~=~=~=~=~=~=~=~=~=~=~=~=~=~=~=~=~=~=~=~=~=~

You received this message because you are subscribed to the Google
Groups "AdWords API and Google Ads API Forum" group.
To post to this group, send email to adwords-api@googlegroups.com
To unsubscribe from this group, send email to
adwords-api+unsubscr...@googlegroups.com
For more options, visit this group at
http://groups.google.com/group/adwords-api?hl=en
--- 
You received this message because you are subscribed to the Google Groups 
"AdWords API and Google Ads API Forum" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to adwords-api+unsubscr...@googlegroups.com.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/adwords-api/4bd6860b-66c1-459a-8790-ed862db851a9%40googlegroups.com.

RE: AuthorizationError.USER_PERMISSION_DENIED error which trying to setup Google Ads API

[Google Ads API Forum Advisor Prod]

Hi Maruti,

Thanks for posting your concern.

The USER_PERMISSION_DENIED error in the AdWords API indicates that you might be 
using OAuth2 credentials that does not have access to the (clientCustomerId) 
account you are authenticating with. To resolve this error, you will need to 
use the OAuth2 credentials that were generated using an email address which has 
access to the account indicated in your request header.

If the error persists after trying the provided suggestion, let me know. You 
may send to me the email address you used to generate the OAuth2 credentials 
and the complete SOAP request and response logs so I can further investigate 
via Reply privately to author option.

Regards,
Ejay
Google Ads API Team
ref:_00D1U1174p._5001UEIKX3:ref

-- 
-- 
=~=~=~=~=~=~=~=~=~=~=~=~=~=~=~=~=~=~=~=~=~=~=~=~
Also find us on our blog:
https://googleadsdeveloper.blogspot.com/
=~=~=~=~=~=~=~=~=~=~=~=~=~=~=~=~=~=~=~=~=~=~=~=~

You received this message because you are subscribed to the Google
Groups "AdWords API and Google Ads API Forum" group.
To post to this group, send email to adwords-api@googlegroups.com
To unsubscribe from this group, send email to
adwords-api+unsubscr...@googlegroups.com
For more options, visit this group at
http://groups.google.com/group/adwords-api?hl=en
--- 
You received this message because you are subscribed to the Google Groups 
"AdWords API and Google Ads API Forum" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to adwords-api+unsubscr...@googlegroups.com.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/adwords-api/f0Ao80PVWNQ700D_EjJbdIRiCFRK_oA_2Row%40sfdc.net.

AuthorizationError.USER_PERMISSION_DENIED error which trying to setup Google Ads API

[Maruti Borker]

Hi All,

Trying to setup google apis but unable to get past 
the AuthorizationError.USER_PERMISSION_DENIED error. 

Here is what I have done :- 

1) I have an MCC account 966-016-0039
2) I have an ads account 361-706-3872 
3) And this MCC account and ads account are linked.

My account ( mar...@cuemath.com ) has access to the MCC account. 

So using the python library I have used my login to get a refresh token and 
tried calling the get campaigns api.

But I am getting the following error :- 

 AuthorizationError.USER_PERMISSION_DENIED

Any help will be appreciated. 

-- 
-- 
=~=~=~=~=~=~=~=~=~=~=~=~=~=~=~=~=~=~=~=~=~=~=~=~
Also find us on our blog:
https://googleadsdeveloper.blogspot.com/
=~=~=~=~=~=~=~=~=~=~=~=~=~=~=~=~=~=~=~=~=~=~=~=~

You received this message because you are subscribed to the Google
Groups "AdWords API and Google Ads API Forum" group.
To post to this group, send email to adwords-api@googlegroups.com
To unsubscribe from this group, send email to
adwords-api+unsubscr...@googlegroups.com
For more options, visit this group at
http://groups.google.com/group/adwords-api?hl=en
--- 
You received this message because you are subscribed to the Google Groups 
"AdWords API and Google Ads API Forum" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to adwords-api+unsubscr...@googlegroups.com.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/adwords-api/fdd98329-993f-4e31-a085-a6c22ff60774%40googlegroups.com.

RE: AuthorizationError.USER_PERMISSION_DENIED error

[googleadsapi-forumadvisor via AdWords API and Google Ads API Forum]

Hello Omri,

If you are using ManagedCustomerService and facing the
USER_PERMISSION_DENIED error. Which means, you might be performing the
actions to the account that you don't have access to. Please note that
expanding invitation should be initiated via Manager account credentials
and accepting/rejecting those invitations should be done with the
credentials of that specific user. You could refer to the linking section
of this guide

for more information.

If the problem persists, Please share the SOAP logs(request and response
)
without redacting any information and the email of the user authenticating
the call. To enable logging you could refer to the logging section of the
README.md file in the client library of your interest. You could use reply
privately to the author option while sharing the information requested.

Regards,
Sai Teja, AdWords API Team


=~=~=~=~=~=~=~=~=~=~=~=~=~=~=~=~=~=~=~=~=~=~=~=~
Also find us on our blog and discussion group:
http://googleadsdeveloper.blogspot.com/search/label/adwords_api
https://developers.google.com/adwords/api/community/
=~=~=~=~=~=~=~=~=~=~=~=~=~=~=~=~=~=~=~=~=~=~=~=~

--
--
=~=~=~=~=~=~=~=~=~=~=~=~=~=~=~=~=~=~=~=~=~=~=~=~
Also find us on our blog:
https://googleadsdeveloper.blogspot.com/
=~=~=~=~=~=~=~=~=~=~=~=~=~=~=~=~=~=~=~=~=~=~=~=~

You received this message because you are subscribed to the Google
Groups "AdWords API and Google Ads API Forum" group.
To post to this group, send email to adwords-api@googlegroups.com
To unsubscribe from this group, send email to
adwords-api+unsubscr...@googlegroups.com
For more options, visit this group at
http://groups.google.com/group/adwords-api?hl=en
--- 
You received this message because you are subscribed to the Google Groups "AdWords API and Google Ads API Forum" group.

To unsubscribe from this group and stop receiving emails from it, send an email 
to adwords-api+unsubscr...@googlegroups.com.
Visit this group at https://groups.google.com/group/adwords-api.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/adwords-api/1a0h2m010hcm260004g440w6gmjadhk6co30c1g68qjee9p%40mail.gmail.com.
For more options, visit https://groups.google.com/d/optout.

AuthorizationError.USER_PERMISSION_DENIED error

[omrigal]

Hi,

We are a web-app that manages our customers Adwords account.

One of our customers performed successfully OAuth flow, afterwards we sent 
an API call to the service "ManagedCustomerService" and received 
*AuthorizationError.USER_PERMISSION_DENIED*.

I'll send all the SOAP API logs once I can replay privately.
Regards,
Omri G.

-- 
-- 
=~=~=~=~=~=~=~=~=~=~=~=~=~=~=~=~=~=~=~=~=~=~=~=~
Also find us on our blog:
https://googleadsdeveloper.blogspot.com/
=~=~=~=~=~=~=~=~=~=~=~=~=~=~=~=~=~=~=~=~=~=~=~=~

You received this message because you are subscribed to the Google
Groups "AdWords API and Google Ads API Forum" group.
To post to this group, send email to adwords-api@googlegroups.com
To unsubscribe from this group, send email to
adwords-api+unsubscr...@googlegroups.com
For more options, visit this group at
http://groups.google.com/group/adwords-api?hl=en
--- 
You received this message because you are subscribed to the Google Groups 
"AdWords API and Google Ads API Forum" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to adwords-api+unsubscr...@googlegroups.com.
Visit this group at https://groups.google.com/group/adwords-api.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/adwords-api/4cbc15b0-8742-4a4f-9501-c93abc1cfd65%40googlegroups.com.
For more options, visit https://groups.google.com/d/optout.

Re: AuthorizationError.USER_PERMISSION_DENIED Error

['Milind Sankeshware (AdWords API Team)' via AdWords API and Google Ads API Forum]

Hi,

The USER_PERMISSION_DENIED 
<https://developers.google.com/adwords/api/docs/common-errors#AuthorizationError.USER_PERMISSION_DENIED>
 
error occurs when there is no link between the user authenticating the API 
request and the client account specified in the headers. Please make sure 
that the user authenticating the call having access to the account targeted 
in the API call. If the user has access to the manager account 
951-020-1282, he will be able to make API calls to the linked account as 
well.

Also, please note that the GetCampaigns.php 
<https://developers.google.com/adwords/api/docs/reference/v201809/CampaignService#get>should
 
only be performed against a client account. You are calling against the 
manager account 951-020-1282, so the result is empty. 

Thanks,
Milind, AdWords API Team

-- 
-- 
=~=~=~=~=~=~=~=~=~=~=~=~=~=~=~=~=~=~=~=~=~=~=~=~
Also find us on our blog:
https://googleadsdeveloper.blogspot.com/
=~=~=~=~=~=~=~=~=~=~=~=~=~=~=~=~=~=~=~=~=~=~=~=~

You received this message because you are subscribed to the Google
Groups "AdWords API and Google Ads API Forum" group.
To post to this group, send email to adwords-api@googlegroups.com
To unsubscribe from this group, send email to
adwords-api+unsubscr...@googlegroups.com
For more options, visit this group at
http://groups.google.com/group/adwords-api?hl=en
--- 
You received this message because you are subscribed to the Google Groups 
"AdWords API and Google Ads API Forum" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to adwords-api+unsubscr...@googlegroups.com.
Visit this group at https://groups.google.com/group/adwords-api.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/adwords-api/1ba94209-c388-40e8-8528-74be69c83b6d%40googlegroups.com.
For more options, visit https://groups.google.com/d/optout.

AuthorizationError.USER_PERMISSION_DENIED Error

[Pavunkumar]

php   examples/AdWords/v201806/BasicOperations/GetCampaigns.php

Request Log

[2018-12-22 16:13:25] AW_SOAP.WARNING: clientCustomerId=951-020-1282 
operations=1 service=CampaignService method=get responseTime=114 
requestId=00057d9a08911a200a62e0d62507eadc server=adwords.google.com 
isFault=1 faultMessage=[AuthorizationError.USER_PERMISSION_DENIED @ ; 
trigger:'']  
[2018-12-22 16:13:25] AW_SOAP.NOTICE: POST 
/api/adwords/cm/v201806/CampaignService?wsdl HTTP/1.1
Host: adwords.google.com
Connection: close
User-Agent: PHP-SOAP/5.6.29
Content-Type: text/xml; charset=utf-8
SOAPAction: ""
Content-Length: 916
Authorization: REDACTED


http://schemas.xmlsoap.org/soap/envelope/"; 
xmlns:ns1="https://adwords.google.com/api/adwords/cm/v201806";>951-020-1282REDACTEDunknown
 
(AwApi-PHP, googleads-php-lib/38.0.0, 
PHP/5.6.29)falsefalseIdNameNameASCENDING0500

Dont know, clientCustomerId=951-020-1282   Why this is coming. No where i 
specified  client cumstomer id value,  Is this cause of the problem am 
facing 

All Looks fine. Could not find , why am getting this error. Please advice 

Thanks 

-- 
-- 
=~=~=~=~=~=~=~=~=~=~=~=~=~=~=~=~=~=~=~=~=~=~=~=~
Also find us on our blog:
https://googleadsdeveloper.blogspot.com/
=~=~=~=~=~=~=~=~=~=~=~=~=~=~=~=~=~=~=~=~=~=~=~=~

You received this message because you are subscribed to the Google
Groups "AdWords API and Google Ads API Forum" group.
To post to this group, send email to adwords-api@googlegroups.com
To unsubscribe from this group, send email to
adwords-api+unsubscr...@googlegroups.com
For more options, visit this group at
http://groups.google.com/group/adwords-api?hl=en
--- 
You received this message because you are subscribed to the Google Groups 
"AdWords API and Google Ads API Forum" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to adwords-api+unsubscr...@googlegroups.com.
Visit this group at https://groups.google.com/group/adwords-api.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/adwords-api/a94e8ab9-0c6c-4f45-95e6-11d666c9ca71%40googlegroups.com.
For more options, visit https://groups.google.com/d/optout.

Re: AuthorizationError.USER_PERMISSION_DENIED error

['Yin Niu' via AdWords API Forum]

Hi Stephen, 

USER_PERMISSION_ERROR 

 occurs 
when the manager account you use for accessing the API is not linked to the 
client account specified in the request headers. 

Thanks,
Yin, AdWords API Team. 

-- 
-- 
=~=~=~=~=~=~=~=~=~=~=~=~=~=~=~=~=~=~=~=~=~=~=~=~
Also find us on our blog and Google+:
https://googleadsdeveloper.blogspot.com/
https://plus.google.com/+GoogleAdsDevelopers/posts
=~=~=~=~=~=~=~=~=~=~=~=~=~=~=~=~=~=~=~=~=~=~=~=~

You received this message because you are subscribed to the Google
Groups "AdWords API Forum" group.
To post to this group, send email to adwords-api@googlegroups.com
To unsubscribe from this group, send email to
adwords-api+unsubscr...@googlegroups.com
For more options, visit this group at
http://groups.google.com/group/adwords-api?hl=en
--- 
You received this message because you are subscribed to the Google Groups 
"AdWords API Forum" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to adwords-api+unsubscr...@googlegroups.com.
Visit this group at https://groups.google.com/group/adwords-api.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/adwords-api/9c2b67ee-5710-4c84-8d1d-cc38cfba3991%40googlegroups.com.
For more options, visit https://groups.google.com/d/optout.

AuthorizationError.USER_PERMISSION_DENIED error?

[stephenjcoyne]

Receiving following error when running python get_report_fields.py 

Followed this process 
(https://developers.google.com/adwords/api/docs/guides/oauth_playground#overview)
 
to set up credentials.

No handlers could be found for logger "suds.client"

Traceback (most recent call last):

  File "get_report_fields.py", line 53, in 

main(adwords_client, REPORT_TYPE)

  File "get_report_fields.py", line 39, in main

fields = report_definition_service.getReportFields(report_type)

  File "build/bdist.macosx-10.5-x86_64/egg/googleads/common.py", line 323, 
in MakeSoapRequest

  File 
"/Users/stephen/anaconda/lib/python2.7/site-packages/suds/client.py", line 
521, in __call__

return client.invoke(args, kwargs)

  File 
"/Users/stephen/anaconda/lib/python2.7/site-packages/suds/client.py", line 
581, in invoke

result = self.send(soapenv)

  File 
"/Users/stephen/anaconda/lib/python2.7/site-packages/suds/client.py", line 
619, in send

description=tostr(e), original_soapenv=original_soapenv)

  File 
"/Users/stephen/anaconda/lib/python2.7/site-packages/suds/client.py", line 
670, in process_reply

raise WebFault(fault, replyroot)

suds.WebFault: Server raised fault: 
'[AuthorizationError.USER_PERMISSION_DENIED @ ; trigger:'']'


Do not understand what to do?

Thanks Stephen

-- 
-- 
=~=~=~=~=~=~=~=~=~=~=~=~=~=~=~=~=~=~=~=~=~=~=~=~
Also find us on our blog and Google+:
https://googleadsdeveloper.blogspot.com/
https://plus.google.com/+GoogleAdsDevelopers/posts
=~=~=~=~=~=~=~=~=~=~=~=~=~=~=~=~=~=~=~=~=~=~=~=~

You received this message because you are subscribed to the Google
Groups "AdWords API Forum" group.
To post to this group, send email to adwords-api@googlegroups.com
To unsubscribe from this group, send email to
adwords-api+unsubscr...@googlegroups.com
For more options, visit this group at
http://groups.google.com/group/adwords-api?hl=en
--- 
You received this message because you are subscribed to the Google Groups 
"AdWords API Forum" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to adwords-api+unsubscr...@googlegroups.com.
Visit this group at https://groups.google.com/group/adwords-api.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/adwords-api/b7e764cf-81d6-4fbe-88a7-b428ffa671dc%40googlegroups.com.
For more options, visit https://groups.google.com/d/optout.

AuthorizationError.USER_PERMISSION_DENIED error

[stephenjcoyne]

 

I'm getting an error when trying to run the python get_report_fields.py 
script.

I have followed this process 

 to 
obtain my token details but get the following error that I do not 
understand:



No handlers could be found for logger "suds.client"

Traceback (most recent call last):

  File "get_report_fields.py", line 53, in 

main(adwords_client, REPORT_TYPE)

  File "get_report_fields.py", line 39, in main

fields = report_definition_service.getReportFields(report_type)

  File "build/bdist.macosx-10.5-x86_64/egg/googleads/common.py", line 323, 
in MakeSoapRequest

  File 
"/Users/stephen/anaconda/lib/python2.7/site-packages/suds/client.py", line 
521, in __call__

return client.invoke(args, kwargs)

  File 
"/Users/stephen/anaconda/lib/python2.7/site-packages/suds/client.py", line 
581, in invoke

result = self.send(soapenv)

  File 
"/Users/stephen/anaconda/lib/python2.7/site-packages/suds/client.py", line 
619, in send

description=tostr(e), original_soapenv=original_soapenv)

  File 
"/Users/stephen/anaconda/lib/python2.7/site-packages/suds/client.py", line 
670, in process_reply

raise WebFault(fault, replyroot)

suds.WebFault: Server raised fault: 
'[AuthorizationError.USER_PERMISSION_DENIED @ ; trigger:'']'


Thanks,
Stephen

-- 
-- 
=~=~=~=~=~=~=~=~=~=~=~=~=~=~=~=~=~=~=~=~=~=~=~=~
Also find us on our blog and Google+:
https://googleadsdeveloper.blogspot.com/
https://plus.google.com/+GoogleAdsDevelopers/posts
=~=~=~=~=~=~=~=~=~=~=~=~=~=~=~=~=~=~=~=~=~=~=~=~

You received this message because you are subscribed to the Google
Groups "AdWords API Forum" group.
To post to this group, send email to adwords-api@googlegroups.com
To unsubscribe from this group, send email to
adwords-api+unsubscr...@googlegroups.com
For more options, visit this group at
http://groups.google.com/group/adwords-api?hl=en
--- 
You received this message because you are subscribed to the Google Groups 
"AdWords API Forum" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to adwords-api+unsubscr...@googlegroups.com.
Visit this group at https://groups.google.com/group/adwords-api.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/adwords-api/cdc5ec87-2d72-4d4e-b2b7-5afed640884d%40googlegroups.com.
For more options, visit https://groups.google.com/d/optout.

Re: Receiving AuthorizationError.USER_PERMISSION_DENIED error after following all setup steps

[Danial Klimkin]

Hello,


Service account authorization can only be used if your AdWords account is 
on a google apps domain. In all other cases, please use application or web 
flows.


-Danial, AdWords API Team.


On Friday, December 13, 2013 2:25:42 AM UTC+4, leig...@verticalbrands.com 
wrote:
>
> I am already using a Service Account to connect to Google Analytics and 
> get information. 
> For the Analytics API the key step was adding the service account's email 
> address to our analytics account. 
> I have a feeling I'm missing the equivalent setup step for Adwords, but 
> the available documentation is of little help, just like when I was trying 
> to figure out analytics. 
> Developers everywhere would be grateful if Google improved and updated 
> their api documentation. It really isn't that hard to tell that they need 
> to add the service account email address to analytics if they want it to 
> work as advertised.
>
> Anyways, I have followed all the the documented steps to get a Google 
> Service Account access to the Adwords API for our MCC account:
> https://developers.google.com/adwords/api/docs/guides/service-accounts
>
> In detail this is what I have done so far:
>
>- I have an approved developer token for my company's MCC account 
>(850-XXX-)
>- The domain administrator for my domain (verticalbrands.com) has 
>enabled impersonation abilities for my service account's client id for the 
>api scope https://adwords.google.com/api/adwords
>- I am using the official Google Adwords API Client for Ruby: 
>https://github.com/googleads/google-api-ads-ruby
>- I am instatiating the API object as such (anonymized of course): 
>
> @adwords_client = AdwordsApi::Api.new({
>   authentication: {
> method: 'OAUTH2_JWT',
> oauth2_issuer: 'xx...@developer.gserviceaccount.com 
> ',
> oauth2_secret: 'notasecret',
> oauth2_keyfile: key_filename, #I'm sure the key location is 
> correct, as it works for analytics
> oauth2_prn: 'xx...@verticalbrands.com ', # This 
> email address is connected to an Adwords account under the MCC umbrella 
> with the approved dev token
> developer_token: developer_token, # This is the approved developer 
> token.
> client_customer_id: '850-882-',
> user_agent: 'KPI Metrics'
>   },
>   service: {
> environment: 'PRODUCTION'
>   },
>   connection: {
> enable_gzip: false
>   },
>   library: {
> log_level: 'DEBUG'
>   }
> })
>
> According to the docs, I should be able to impersonate any user in my 
> domain (verticalbrands.com) for access to the api with this configuration 
> and an approved developer token. 
> The authorization seems to succeed. Calling authorize on the client object 
> yields:
> {:access_token=>"X",
>  :issued_at=>2013-12-12 13:44:40 -0800,
>  :expires_in=>3600,
>  :id_token=>nil}
>
> However, every request I send gets the same error:
> AdwordsApi::Errors::ReportXmlError: HTTP code: 400, error type: 
> 'AuthorizationError.USER_PERMISSION_DENIED', trigger: '', field path: 
> ''
>
> Besides the obvious question of: why aren't the docs complete enough to 
> get a request to work from a Service Account?
> I have more pointed questions:
>
>1. The MCC account is for a different domain (realtynation.com). Do I 
>need to impersonate the MCC account email address (
>xx...@realtynation.com ) instead of the actual adwords 
>account I'm interested in (xx...@verticalbrands.com )?
>2. Is the Domain mismatch between the two email addresses causing this 
>issue?
>3. In the Account Access settings page, it indicates that the 
>xx...@verticalbrands.com  email address has 
>"Administrative Access' but the xx...@realtynation.com 
> address has 'User 
>interface and API' access. 
>Does 'Administrative Access' not include API access? If so, does this 
>mean I MUST impersonate an account that has API access specifically? If 
> so, 
>why isn't this anywhere in the documentation? 
>4. Do I need to add the Service Account's email address to one of the 
>Adwords account? If so, how do I get to the verification email for a 
>Service Account?
>
>
>
>
>
>
>
>
>
>
>
>

-- 
-- 
=~=~=~=~=~=~=~=~=~=~=~=~=~=~=~=~=~=~=~=~=~=~=~=~
Also find us on our blog and discussion group:
http://googleadsdeveloper.blogspot.com
http://groups.google.com/group/adwords-api
=~=~=~=~=~=~=~=~=~=~=~=~=~=~=~=~=~=~=~=~=~=~=~=~

You received this message because you are subscribed to the Google
Groups "AdWords API Forum" group.
To post to this group, send email to adwords-api@googlegroups.com
To unsubscribe from this group, send email to
adwords-api+unsubscr...@googlegroups.com
For more options, visit this group at
http://groups.google.com/group/adwords-api?hl=en
--- 
You received this message because you are subscribed to the Google Groups 
"AdWords API Forum" group.
To unsubscribe from t

Receiving AuthorizationError.USER_PERMISSION_DENIED error after following all setup steps

[leighton]

I am already using a Service Account to connect to Google Analytics and get 
information. 
For the Analytics API the key step was adding the service account's email 
address to our analytics account. 
I have a feeling I'm missing the equivalent setup step for Adwords, but the 
available documentation is of little help, just like when I was trying to 
figure out analytics. 
Developers everywhere would be grateful if Google improved and updated 
their api documentation. It really isn't that hard to tell that they need 
to add the service account email address to analytics if they want it to 
work as advertised.

Anyways, I have followed all the the documented steps to get a Google 
Service Account access to the Adwords API for our MCC account:
https://developers.google.com/adwords/api/docs/guides/service-accounts

In detail this is what I have done so far:

   - I have an approved developer token for my company's MCC account 
   (850-XXX-)
   - The domain administrator for my domain (verticalbrands.com) has 
   enabled impersonation abilities for my service account's client id for the 
   api scope https://adwords.google.com/api/adwords
   - I am using the official Google Adwords API Client for Ruby: 
   https://github.com/googleads/google-api-ads-ruby
   - I am instatiating the API object as such (anonymized of course): 

@adwords_client = AdwordsApi::Api.new({
  authentication: {
method: 'OAUTH2_JWT',
oauth2_issuer: 'xx...@developer.gserviceaccount.com',
oauth2_secret: 'notasecret',
oauth2_keyfile: key_filename, #I'm sure the key location is 
correct, as it works for analytics
oauth2_prn: 'xx...@verticalbrands.com', # This email address is 
connected to an Adwords account under the MCC umbrella with the approved 
dev token
developer_token: developer_token, # This is the approved developer 
token.
client_customer_id: '850-882-',
user_agent: 'KPI Metrics'
  },
  service: {
environment: 'PRODUCTION'
  },
  connection: {
enable_gzip: false
  },
  library: {
log_level: 'DEBUG'
  }
})

According to the docs, I should be able to impersonate any user in my 
domain (verticalbrands.com) for access to the api with this configuration 
and an approved developer token. 
The authorization seems to succeed. Calling authorize on the client object 
yields:
{:access_token=>"X",
 :issued_at=>2013-12-12 13:44:40 -0800,
 :expires_in=>3600,
 :id_token=>nil}

However, every request I send gets the same error:
AdwordsApi::Errors::ReportXmlError: HTTP code: 400, error type: 
'AuthorizationError.USER_PERMISSION_DENIED', trigger: '', field path: 
''

Besides the obvious question of: why aren't the docs complete enough to get 
a request to work from a Service Account?
I have more pointed questions:

   1. The MCC account is for a different domain (realtynation.com). Do I 
   need to impersonate the MCC account email address (xx...@realtynation.com) 
   instead of the actual adwords account I'm interested in 
   (xx...@verticalbrands.com)?
   2. Is the Domain mismatch between the two email addresses causing this 
   issue?
   3. In the Account Access settings page, it indicates that 
   the xx...@verticalbrands.com email address has "Administrative Access' but 
   the xx...@realtynation.com address has 'User interface and API' access. 
   Does 'Administrative Access' not include API access? If so, does this 
   mean I MUST impersonate an account that has API access specifically? If so, 
   why isn't this anywhere in the documentation? 
   4. Do I need to add the Service Account's email address to one of the 
   Adwords account? If so, how do I get to the verification email for a 
   Service Account?











-- 
-- 
=~=~=~=~=~=~=~=~=~=~=~=~=~=~=~=~=~=~=~=~=~=~=~=~
Also find us on our blog and discussion group:
http://googleadsdeveloper.blogspot.com
http://groups.google.com/group/adwords-api
=~=~=~=~=~=~=~=~=~=~=~=~=~=~=~=~=~=~=~=~=~=~=~=~

You received this message because you are subscribed to the Google
Groups "AdWords API Forum" group.
To post to this group, send email to adwords-api@googlegroups.com
To unsubscribe from this group, send email to
adwords-api+unsubscr...@googlegroups.com
For more options, visit this group at
http://groups.google.com/group/adwords-api?hl=en
--- 
You received this message because you are subscribed to the Google Groups 
"AdWords API Forum" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to adwords-api+unsubscr...@googlegroups.com.
For more options, visit https://groups.google.com/groups/opt_out.

Re: AuthorizationError.USER_PERMISSION_DENIED error with v201209

[igor]

Thank you for your reply.

I rechecked everything and it was fine, then I remembered that project in 
Google API Console was created using different user and then ownership was 
transferred to adwords user, recreating it using adwords user did the trick.

Thanks.

On Tuesday, 19 February 2013 09:28:37 UTC, Danial Klimkin wrote:
>
> Hello Igor,
>
>
> This error occurs when your oauth2 credentials are for the login that has 
> no access to the account. Double-check the credential set you are using, 
> and the clientCustomerId you send in the headers.
>
>
> -Danial, AdWords API Team.
>
>
> On Thursday, February 14, 2013 11:48:56 PM UTC+4, ig...@blueclaw.co.ukwrote:
>>
>> Hi,
>>
>> I have a python application that is using latest APIs version with 
>> offline OAuth2.
>> While developing I was using MCC with test client account without any 
>> issues (developerToken is approved).
>>
>> During test with live account this error popped up.
>> Initially I assumed that I really do not have API access for that client 
>> account, after double checking I went back to examples, 
>> tried to use oauth2 
>> example
>>  
>> without campaign creation but it is the same error anyway.
>>
>> Any ideas?
>>
>> Cheers,
>>
>> Igor.
>>
>

-- 
-- 
=~=~=~=~=~=~=~=~=~=~=~=~=~=~=~=~=~=~=~=~=~=~=~=~
Also find us on our blog and discussion group:
http://adwordsapi.blogspot.com
http://groups.google.com/group/adwords-api
=~=~=~=~=~=~=~=~=~=~=~=~=~=~=~=~=~=~=~=~=~=~=~=~

You received this message because you are subscribed to the Google
Groups "AdWords API Forum" group.
To post to this group, send email to adwords-api@googlegroups.com
To unsubscribe from this group, send email to
adwords-api+unsubscr...@googlegroups.com
For more options, visit this group at
http://groups.google.com/group/adwords-api?hl=en

--- 
You received this message because you are subscribed to the Google Groups 
"AdWords API Forum" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to adwords-api+unsubscr...@googlegroups.com.
For more options, visit https://groups.google.com/groups/opt_out.

Re: AuthorizationError.USER_PERMISSION_DENIED error with v201209

[Danial Klimkin]

Hello Igor,


This error occurs when your oauth2 credentials are for the login that has 
no access to the account. Double-check the credential set you are using, 
and the clientCustomerId you send in the headers.


-Danial, AdWords API Team.


On Thursday, February 14, 2013 11:48:56 PM UTC+4, ig...@blueclaw.co.uk 
wrote:
>
> Hi,
>
> I have a python application that is using latest APIs version with offline 
> OAuth2.
> While developing I was using MCC with test client account without any 
> issues (developerToken is approved).
>
> During test with live account this error popped up.
> Initially I assumed that I really do not have API access for that client 
> account, after double checking I went back to examples, 
> tried to use oauth2 
> example
>  
> without campaign creation but it is the same error anyway.
>
> Any ideas?
>
> Cheers,
>
> Igor.
>

-- 
-- 
=~=~=~=~=~=~=~=~=~=~=~=~=~=~=~=~=~=~=~=~=~=~=~=~
Also find us on our blog and discussion group:
http://adwordsapi.blogspot.com
http://groups.google.com/group/adwords-api
=~=~=~=~=~=~=~=~=~=~=~=~=~=~=~=~=~=~=~=~=~=~=~=~

You received this message because you are subscribed to the Google
Groups "AdWords API Forum" group.
To post to this group, send email to adwords-api@googlegroups.com
To unsubscribe from this group, send email to
adwords-api+unsubscr...@googlegroups.com
For more options, visit this group at
http://groups.google.com/group/adwords-api?hl=en

--- 
You received this message because you are subscribed to the Google Groups 
"AdWords API Forum" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to adwords-api+unsubscr...@googlegroups.com.
For more options, visit https://groups.google.com/groups/opt_out.

Re: AuthorizationError.USER_PERMISSION_DENIED error with v201209

[igor]

Did no one come across this error when technically all requirements are 
satisfied?

On Thursday, 14 February 2013 19:48:56 UTC, ig...@blueclaw.co.uk wrote:
>
> Hi,
>
> I have a python application that is using latest APIs version with offline 
> OAuth2.
> While developing I was using MCC with test client account without any 
> issues (developerToken is approved).
>
> During test with live account this error popped up.
> Initially I assumed that I really do not have API access for that client 
> account, after double checking I went back to examples, 
> tried to use oauth2 
> example
>  
> without campaign creation but it is the same error anyway.
>
> Any ideas?
>
> Cheers,
>
> Igor.
>

-- 
-- 
=~=~=~=~=~=~=~=~=~=~=~=~=~=~=~=~=~=~=~=~=~=~=~=~
Also find us on our blog and discussion group:
http://adwordsapi.blogspot.com
http://groups.google.com/group/adwords-api
=~=~=~=~=~=~=~=~=~=~=~=~=~=~=~=~=~=~=~=~=~=~=~=~

You received this message because you are subscribed to the Google
Groups "AdWords API Forum" group.
To post to this group, send email to adwords-api@googlegroups.com
To unsubscribe from this group, send email to
adwords-api+unsubscr...@googlegroups.com
For more options, visit this group at
http://groups.google.com/group/adwords-api?hl=en

--- 
You received this message because you are subscribed to the Google Groups 
"AdWords API Forum" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to adwords-api+unsubscr...@googlegroups.com.
For more options, visit https://groups.google.com/groups/opt_out.

AuthorizationError.USER_PERMISSION_DENIED error with v201209

[igor]

Hi,

I have a python application that is using latest APIs version with offline 
OAuth2.
While developing I was using MCC with test client account without any 
issues (developerToken is approved).

During test with live account this error popped up.
Initially I assumed that I really do not have API access for that client 
account, after double checking I went back to examples, 
tried to use oauth2 
example
 
without campaign creation but it is the same error anyway.

Any ideas?

Cheers,

Igor.

-- 
-- 
=~=~=~=~=~=~=~=~=~=~=~=~=~=~=~=~=~=~=~=~=~=~=~=~
Also find us on our blog and discussion group:
http://adwordsapi.blogspot.com
http://groups.google.com/group/adwords-api
=~=~=~=~=~=~=~=~=~=~=~=~=~=~=~=~=~=~=~=~=~=~=~=~

You received this message because you are subscribed to the Google
Groups "AdWords API Forum" group.
To post to this group, send email to adwords-api@googlegroups.com
To unsubscribe from this group, send email to
adwords-api+unsubscr...@googlegroups.com
For more options, visit this group at
http://groups.google.com/group/adwords-api?hl=en

--- 
You received this message because you are subscribed to the Google Groups 
"AdWords API Forum" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to adwords-api+unsubscr...@googlegroups.com.
For more options, visit https://groups.google.com/groups/opt_out.