RE: Google Ads API: Cannot create a sub-account , USER_PERMISSION_DENIED

2020-04-09 Thread Google Ads API Forum Advisor Prod
Hi Vlad,

In order for me to further investigate, can you please provide the unmasked 
client ID as well as the email address used to authenticate the API call? 
Ensure you "Reply privately to author" when providing this information.

Thanks,
Danica Calusin, Google Ads API Team
ref:_00D1U1174p._5001UZXBvn:ref

-- 
-- 
=~=~=~=~=~=~=~=~=~=~=~=~=~=~=~=~=~=~=~=~=~=~=~=~
Also find us on our blog:
https://googleadsdeveloper.blogspot.com/
=~=~=~=~=~=~=~=~=~=~=~=~=~=~=~=~=~=~=~=~=~=~=~=~

You received this message because you are subscribed to the Google
Groups "AdWords API and Google Ads API Forum" group.
To post to this group, send email to adwords-api@googlegroups.com
To unsubscribe from this group, send email to
adwords-api+unsubscr...@googlegroups.com
For more options, visit this group at
http://groups.google.com/group/adwords-api?hl=en
--- 
You received this message because you are subscribed to the Google Groups 
"AdWords API and Google Ads API Forum" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to adwords-api+unsubscr...@googlegroups.com.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/adwords-api/4UmuQ0Q8JH6E00dcahKjzxREKwMNEKZyimqw%40sfdc.net.


Google Ads API: Cannot create a sub-account , USER_PERMISSION_DENIED

2020-04-09 Thread V Kuznetsov
Hello,

I am trying to create a sub-account on behalf of the MCC manager. I use 
example from the documentation (
https://developers.google.com/google-ads/api/docs/account-management/create-account
)

When I authorize as the MCC manager (447-9838-XXX) I get this error:
---BEGIN API CALL---

Request
---

Method Name: 
/google.ads.googleads.v3.services.CustomerService/CreateCustomerClient
Host: https://googleads.googleapis.com
Headers: {
  "x-goog-api-client": "gl-dotnet/4.0.30319 gccl/2.8.0 gapic/2.8.0 
gax/2.10.0 grpc/1.22.1",
  "developer-token": "REDACTED",
  "login-customer-id": "4479838XXX",
  "x-goog-request-params": "customer_id=4479838XXX"
}

{ "customerId": "4479838XXX", "customerClient": { "descriptiveName": "Test 
Account created with CustomerService on '2020-04-09 1:08:32 PM'", 
"currencyCode": "CAD", "timeZone": "America/Los_Angeles", 
"hasPartnersBadge": false, "testAccount": true } }

Response

Headers: {
  "request-id": "Ldl-lXKIwoWCPF9SUd2y0A",
  "date": "Thu, 09 Apr 2020 20:08:33 GMT",
  "alt-svc": "quic=\":443\"; ma=2592000; v=\"46,43\",h3-Q050=\":443\"; 
ma=2592000,h3-Q049=\":443\"; ma=2592000,h3-Q048=\":443\"; 
ma=2592000,h3-Q046=\":443\"; ma=2592000,h3-Q043=\":443\"; 
ma=2592000,h3-T050=\":443\"; ma=2592000",
  "google.ads.googleads.v3.errors.googleadsfailure-bin": 
"Co0CCgJIAhKGAlVzZXIgZG9lc24ndCBoYXZlIHBlcm1pc3Npb24gdG8gYWNjZXNzIGN1c3RvbWVyLiBOb3RlOiBJZiB5b3UncmUgYWNjZXNzaW5nIGEgY2xpZW50IGN1c3RvbWVyLCB0aGUgbWFuYWdlcidzIGN1c3RvbWVyIGlkIG11c3QgYmUgc2V0IGluIHRoZSAnbG9naW4tY3VzdG9tZXItaWQnIGhlYWRlci4gU2VlIGh0dHBzOi8vZGV2ZWxvcGVycy5nb29nbGUuY29tL2dvb2dsZS1hZHMvYXBpL2RvY3MvY29uY2VwdHMvY2FsbC1zdHJ1Y3R1cmUjbG9naW4tY3VzdG9tZXItaWQ=",
  "grpc-status-details-bin": 
"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"
}

Fault: {
  "StatusCode": 7,
  "Details": "The caller does not have permission",
  "RequestId": "Ldl-lXKIwoWCPF9SUd2y0A",
  "Failure": {
"errors": [
  {
"errorCode": {
  "authorizationError": "USER_PERMISSION_DENIED"
},
"message": "User doesn't have permission to access customer. Note: 
If you're accessing a client customer, the manager's customer id must be 
set in the 'login-customer-id' header. See 
https://developers.google.com/google-ads/api/docs/concepts/call-structure#login-customer-id";
  }
]
  }
}
END API CALL

This is unexpected, since the login-customer-id is clearly set. This 
manager user can create sub-accounts in the MCC admin panel. But via the 
API it fails.

Please help to solve this problem.

Thanks,
Vlad.

-- 
-- 
=~=~=~=~=~=~=~=~=~=~=~=~=~=~=~=~=~=~=~=~=~=~=~=~
Also find us on our blog:
https://googleadsdeveloper.blogspot.com/
=~=~=~=~=~=~=~=~=~=~=~=~=~=~=~=~=~=~=~=~=~=~=~=~

You received this message because you are subscribed to the Google
Groups "AdWords API and Google Ads API Forum" group.
To post to this group, send email to adwords-api@googlegroups.com
To unsubscribe from this group, send email to
adwords-api+unsubscr...@googlegroups.com
For more options, visit this group at
http://groups.google.com/group/adwords-api?hl=en
--- 
You received this message because you are subscribed to the Google Groups 
"AdWords API and Google Ads API Forum" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to adwords-api+unsubscr...@googlegroups.com.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/adwords-api/fa66c07e-af63-43fb-8f8c-5b88d067d116%40googlegroups.com.