Re: authorization_error: USER_PERMISSION_DENIED

['Google Ads API Forum Advisor' via Google Ads API and AdWords API Forum]

Hi Phil,

Thank you for reaching out to the Google Ads API support team.

To investigate the issue further, could you please provide the complete request 
and response logs, with the request-id? If you haven't yet, logging can be 
enabled by navigating to the Client libraries > Your client library (ex. Java) 
> Logging documentation, which you can access from this link.You can provide it 
via Reply privately to author option. If this option is not available, you may 
send the details directly to our googleadsapi-supp...@google.com alias instead. 
Let me know if you have any questions.

Thanks,

Nirmitabahen Gaurav
Google Ads API Team
ref:_00D1U1174p._5004Q2cUy7x:ref

-- 
-- 
=~=~=~=~=~=~=~=~=~=~=~=~=~=~=~=~=~=~=~=~=~=~=~=~
Also find us on our blog:
https://googleadsdeveloper.blogspot.com/
=~=~=~=~=~=~=~=~=~=~=~=~=~=~=~=~=~=~=~=~=~=~=~=~

You received this message because you are subscribed to the Google
Groups "AdWords API and Google Ads API Forum" group.
To post to this group, send email to adwords-api@googlegroups.com
To unsubscribe from this group, send email to
adwords-api+unsubscr...@googlegroups.com
For more options, visit this group at
http://groups.google.com/group/adwords-api?hl=en
--- 
You received this message because you are subscribed to the Google Groups 
"Google Ads API and AdWords API Forum" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to adwords-api+unsubscr...@googlegroups.com.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/adwords-api/Oc4J50REX24O007_jyQ41wQ1iRycZjtb9tVg%40sfdc.net.

Re: authorization_error: USER_PERMISSION_DENIED

[Phil Rotella]

This same thing happened to me yesterday starting at 3:30 pm ET. Individual 
calls weren't consistently failing; the exact same call could succeed once, 
then fail for "USER_PERMISSION_DENIED", then succeed. I upgraded my Google 
Ads API from version 10 to version 11 around 4:45 pm ET and haven't had it 
happen since. 

Out of curiosity, I then downgraded back to version 10 and the issue did 
NOT reappear. It's possible Google fixed an internal issue at the same time 
that I upgraded, though I suspect the problem was in an older dependency 
package.

On Monday, July 11, 2022 at 7:45:19 PM UTC-7 adsapi wrote:

> Hi Ashir and Shaun,
>
> Thank you for raising your concern to my team.
>
> I would like to inform you that USER_PERMISSION_DENIED occurs when you're 
> not specifying the customer ID of the Google Ads Account, where your login 
> user account / email address (that you've used to generate Oauth2 
> credential) has direct access, to the login-customer-id. If your login user 
> account / email address has access to the manager account, then its 
> customer id must be set in the *login-customer-id* header.
>
> If the error persists after trying the provided suggestion, please provide 
> the email address that you've used in the authentication and the complete 
> request 
> 
>  
> and response 
> 
>  
> logs with request ID 
> 
>  
> and request header 
> 
>  
> generated on your end to further investigate.
>
> You can provide it via *Reply privately to author* option. If this option 
> is not available, then send it instead on this email address 
> googleadsa...@google.com.
>
> Regards,
> [image: Google Logo] 
> Ernie John 
> Google Ads API Team 
>   
>
> ref:_00D1U1174p._5004Q2cUy7x:ref
>

-- 
-- 
=~=~=~=~=~=~=~=~=~=~=~=~=~=~=~=~=~=~=~=~=~=~=~=~
Also find us on our blog:
https://googleadsdeveloper.blogspot.com/
=~=~=~=~=~=~=~=~=~=~=~=~=~=~=~=~=~=~=~=~=~=~=~=~

You received this message because you are subscribed to the Google
Groups "AdWords API and Google Ads API Forum" group.
To post to this group, send email to adwords-api@googlegroups.com
To unsubscribe from this group, send email to
adwords-api+unsubscr...@googlegroups.com
For more options, visit this group at
http://groups.google.com/group/adwords-api?hl=en
--- 
You received this message because you are subscribed to the Google Groups 
"Google Ads API and AdWords API Forum" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to adwords-api+unsubscr...@googlegroups.com.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/adwords-api/e3e6f614-08ba-4039-a950-c8acfb14e0a4n%40googlegroups.com.

Re: authorization_error: USER_PERMISSION_DENIED

[Shaun Bond]

Same issue here - can someone from Google please confirm?

On Tuesday, July 12, 2022 at 6:33:00 AM UTC+10 ashirk...@gmail.com wrote:

> Hey i frequently facing this error after sending requests.I download the 
> report of client-customer-id but downloaded some client report api throw 
> this error.Api works fine yesterday.But today i frequently face this 
> error.I also use correct credentials.
> Can you inform me why api doing this.
> Thanks

-- 
-- 
=~=~=~=~=~=~=~=~=~=~=~=~=~=~=~=~=~=~=~=~=~=~=~=~
Also find us on our blog:
https://googleadsdeveloper.blogspot.com/
=~=~=~=~=~=~=~=~=~=~=~=~=~=~=~=~=~=~=~=~=~=~=~=~

You received this message because you are subscribed to the Google
Groups "AdWords API and Google Ads API Forum" group.
To post to this group, send email to adwords-api@googlegroups.com
To unsubscribe from this group, send email to
adwords-api+unsubscr...@googlegroups.com
For more options, visit this group at
http://groups.google.com/group/adwords-api?hl=en
--- 
You received this message because you are subscribed to the Google Groups 
"Google Ads API and AdWords API Forum" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to adwords-api+unsubscr...@googlegroups.com.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/adwords-api/4975ebae-55da-4fdc-934a-84a0bdcf5c33n%40googlegroups.com.

RE: authorization_error: USER_PERMISSION_DENIED

[Google Ads API Forum Advisor Prod]

Hi,

My apologies for the delayed response.

If you want to regenerate the OAuth2 credentials and obtain a new refresh 
token, then you may refer to the following guides:
https://developers.google.com/google-ads/api/docs/first-call/oauth-cloud-project
https://developers.google.com/google-ads/api/docs/first-call/refresh-token

Let me know if you have further questions and we will be happy to provide 
support.

Regards,

Ernie John Blanca Tacata
Google Ads API Team
ref:_00D1U1174p._5004Q2DwICp:ref

-- 
-- 
=~=~=~=~=~=~=~=~=~=~=~=~=~=~=~=~=~=~=~=~=~=~=~=~
Also find us on our blog:
https://googleadsdeveloper.blogspot.com/
=~=~=~=~=~=~=~=~=~=~=~=~=~=~=~=~=~=~=~=~=~=~=~=~

You received this message because you are subscribed to the Google
Groups "AdWords API and Google Ads API Forum" group.
To post to this group, send email to adwords-api@googlegroups.com
To unsubscribe from this group, send email to
adwords-api+unsubscr...@googlegroups.com
For more options, visit this group at
http://groups.google.com/group/adwords-api?hl=en
--- 
You received this message because you are subscribed to the Google Groups 
"AdWords API and Google Ads API Forum" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to adwords-api+unsubscr...@googlegroups.com.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/adwords-api/O8Pug0QR8PNF00TVJXPAMISouOWQDUUqw0xA%40sfdc.net.

RE: authorization_error: USER_PERMISSION_DENIED

[Google Ads API Forum Advisor Prod]

Hi Bhargav,

Please provide the requested details via Reply privately to author option if 
the issue persists.

Regards,

Ernie John Blanca Tacata
Google Ads API Team
ref:_00D1U1174p._5004Q2EnDEy:ref

-- 
-- 
=~=~=~=~=~=~=~=~=~=~=~=~=~=~=~=~=~=~=~=~=~=~=~=~
Also find us on our blog:
https://googleadsdeveloper.blogspot.com/
=~=~=~=~=~=~=~=~=~=~=~=~=~=~=~=~=~=~=~=~=~=~=~=~

You received this message because you are subscribed to the Google
Groups "AdWords API and Google Ads API Forum" group.
To post to this group, send email to adwords-api@googlegroups.com
To unsubscribe from this group, send email to
adwords-api+unsubscr...@googlegroups.com
For more options, visit this group at
http://groups.google.com/group/adwords-api?hl=en
--- 
You received this message because you are subscribed to the Google Groups 
"AdWords API and Google Ads API Forum" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to adwords-api+unsubscr...@googlegroups.com.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/adwords-api/mhJFr0QQK9JE00x1txAP8NTYOVgxM_Ea5zfw%40sfdc.net.

RE: authorization_error: USER_PERMISSION_DENIED

[Google Ads API Forum Advisor Prod]

Hi Bhargav,

Thank you for posting your concern.

I would like to inform you first that I am going to remove your initial post as 
it contains API logs generated on your end.

Moving forward, could you confirm if you tried to follow the message in the API 
logs to address the error? I asked this because based on this document about 
PERMISSION_DENIED, this error occurs when authenticating as a user with access 
to a manager account but not specifying login-customer-id in the request. With 
this, it is correct that you need to specify the login-customer-id as the 
manager account ID without hyphens (-).

Please try this suggestion and if the issue persists, you can provide the 
following details to investigate:

Updated request and response logs with request ID generated on your end
email address / user account used to generate Oauth2 credential and has 
accessed to the manager account


Regards,

Ernie John Blanca Tacata
Google Ads API Team
ref:_00D1U1174p._5004Q2EnDEy:ref

-- 
-- 
=~=~=~=~=~=~=~=~=~=~=~=~=~=~=~=~=~=~=~=~=~=~=~=~
Also find us on our blog:
https://googleadsdeveloper.blogspot.com/
=~=~=~=~=~=~=~=~=~=~=~=~=~=~=~=~=~=~=~=~=~=~=~=~

You received this message because you are subscribed to the Google
Groups "AdWords API and Google Ads API Forum" group.
To post to this group, send email to adwords-api@googlegroups.com
To unsubscribe from this group, send email to
adwords-api+unsubscr...@googlegroups.com
For more options, visit this group at
http://groups.google.com/group/adwords-api?hl=en
--- 
You received this message because you are subscribed to the Google Groups 
"AdWords API and Google Ads API Forum" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to adwords-api+unsubscr...@googlegroups.com.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/adwords-api/VGF6I0QQK9GP00htBEHtDtQjm131RbH7S2Gg%40sfdc.net.

Re: authorization_error: USER_PERMISSION_DENIED

[Hubble App]

Hi Matt ,


Thank you for your response, as suggested we would first try to regenerate 
the OAuth2 credentials and obtain a new refresh token.

Could you please help us with STEPs to do same.

Regards,
Hubble App

On Thursday, March 18, 2021 at 12:54:54 AM UTC+5:30 adsapiforumadvisor 
wrote:

> Hello,
>
> Thanks for reaching out. I would recommend regenerating the OAuth2 
> credentials and obtaining a new refresh token using an email that has the 
> proper access level for the target account. I noticed that the operating 
> customer, 2900486729, is given in the login-customer-id header. If you are 
> attempting to access the operating customer from an MCC, the MCC ID should 
> be specified in the login-customer-id header. If you need further 
> assistance, please send us an email at googleadsa...@google.com with a 
> link to this thread.
>
> Thanks,
> Matt
> Google Ads API Team
>
> [image: Google Logo] 
> Matt 
> Google Ads API Team 
>   
>
> ref:_00D1U1174p._5004Q2DwICp:ref
>

-- 
-- 
=~=~=~=~=~=~=~=~=~=~=~=~=~=~=~=~=~=~=~=~=~=~=~=~
Also find us on our blog:
https://googleadsdeveloper.blogspot.com/
=~=~=~=~=~=~=~=~=~=~=~=~=~=~=~=~=~=~=~=~=~=~=~=~

You received this message because you are subscribed to the Google
Groups "AdWords API and Google Ads API Forum" group.
To post to this group, send email to adwords-api@googlegroups.com
To unsubscribe from this group, send email to
adwords-api+unsubscr...@googlegroups.com
For more options, visit this group at
http://groups.google.com/group/adwords-api?hl=en
--- 
You received this message because you are subscribed to the Google Groups 
"AdWords API and Google Ads API Forum" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to adwords-api+unsubscr...@googlegroups.com.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/adwords-api/626d7f62-26ac-4cf6-a412-1001cf8c6b73n%40googlegroups.com.

RE: authorization_error: USER_PERMISSION_DENIED

[Google Ads API Forum Advisor Prod]

Hello,

Thanks for reaching out. I would recommend regenerating the OAuth2 credentials 
and obtaining a new refresh token using an email that has the proper access 
level for the target account. I noticed that the operating customer, 
2900486729, is given in the login-customer-id header. If you are attempting to 
access the operating customer from an MCC, the MCC ID should be specified in 
the login-customer-id header. If you need further assistance, please send us an 
email at googleadsapi-supp...@google.com with a link to this thread.

Thanks,
Matt
Google Ads API Team

Matt
Google Ads API Team
ref:_00D1U1174p._5004Q2DwICp:ref

-- 
-- 
=~=~=~=~=~=~=~=~=~=~=~=~=~=~=~=~=~=~=~=~=~=~=~=~
Also find us on our blog:
https://googleadsdeveloper.blogspot.com/
=~=~=~=~=~=~=~=~=~=~=~=~=~=~=~=~=~=~=~=~=~=~=~=~

You received this message because you are subscribed to the Google
Groups "AdWords API and Google Ads API Forum" group.
To post to this group, send email to adwords-api@googlegroups.com
To unsubscribe from this group, send email to
adwords-api+unsubscr...@googlegroups.com
For more options, visit this group at
http://groups.google.com/group/adwords-api?hl=en
--- 
You received this message because you are subscribed to the Google Groups 
"AdWords API and Google Ads API Forum" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to adwords-api+unsubscr...@googlegroups.com.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/adwords-api/WSeY_0QQ4OL400qMK2CietQbWun5pI6U6qyw%40sfdc.net.

Re: authorization_error: USER_PERMISSION_DENIED

[Pavel Hegler]

Sorry wrong link.
i mean here 

Pavel Hegler schrieb am Mittwoch, 17. März 2021 um 10:12:03 UTC+1:

> I had same issue and fixed it here 
> . Pls take a look:)
>
> app.h...@nbcuni.com schrieb am Mittwoch, 17. März 2021 um 09:06:26 UTC+1:
>
>> Hello Team,
>>
>> We are getting the below response from 1st March 2021 & before that it 
>> ran fine. We suspect this to be something related to token expiration 
>> (Please refer below logs).
>>
>> Request: customer_id: "2900486729" 
>>
>>  FYI : For sharing more details for access token etc., we don't have 
>> "reply to author privately" option to enabled.  
>>
>> Logs: 
>> ##
>> Method: /google.ads.googleads.v5.services.GoogleAdsService/Search
>> Host: googleads.googleapis.com:443
>> Headers: {
>> "developer-token": "REDACTED",
>> "login-customer-id": "2900486729",
>> "x-goog-api-client": "gl-python/3.9.0 grpc/1.33.2 gax/1.23.0 gapic/8.0.0",
>> "x-goog-request-params": "customer_id=2900486729"
>> }
>> Request: customer_id: "2900486729"
>> query: "SELECT\n\t campaign.name,\n\t campaign.id,\n\t 
>> campaign.status,\n\t ad_group.name,\n\t ad_group.id,\n\t 
>> ad_group.status,\n\t ad_group_ad.ad.id,\n\t ad_group_ad.ad.name,\n\t 
>> ad_group_ad.ad.image_ad.name,\n\t ad_group_ad.status,\n 
>> metrics.impressions,\n\t metrics.clicks,\n\t metrics.cost_micros,\n\t 
>> metrics.ctr,\n\t metrics.average_cpc,\n\t metrics.average_cost,\n\t 
>> metrics.average_cpm,\n\t segments.date,\n\t segments.device,\n\t 
>> segments.ad_network_type,\n \t 
>> segments.click_type\nFROM\n\tad_group_ad\nWHERE\n\tsegments.date BETWEEN 
>> \'2021-03-16\' AND \'2021-03-16\'"
>> page_size: 50
>>
>> Response
>> ---
>> Headers: {
>> "google.ads.googleads.v5.errors.googleadsfailure-bin": 
>> "\n\u0001\n\u0002H\u0002\u0012\u0001User doesn't have permission to access 
>> customer. Note: If you're accessing a client customer, the manager's 
>> customer id must be set in the 'login-customer-id' header. See 
>> https://developers.google.com/google-ads/api/docs/concepts/call-structure#cid
>> ",
>> "grpc-status-details-bin": "\b\u0007\u0012#The caller does not have 
>> permission\u001a\u0002\
>> nCtype.googleapis.com/google.ads.googleads.v5.errors.GoogleAdsFailure\u0012\u0002\n\u0001\n\u0002H\u0002\u0012\u0001User
>>  
>> 
>>  
>> doesn't have permission to access customer. Note: If you're accessing a 
>> client customer, the manager's customer id must be set in the 
>> 'login-customer-id' header. See 
>> https://developers.google.com/google-ads/api/docs/concepts/call-structure#cid
>> ",
>> "request-id": "MQiYxhCMioS-s02kGyfz5g"
>> }
>> Fault: errors {
>> error_code {
>> authorization_error: USER_PERMISSION_DENIED
>> }
>> message: "User doesn\'t have permission to access customer. Note: If 
>> you\'re accessing a client customer, the manager\'s customer id must be set 
>> in the \'login-customer-id\' header. See 
>> https://developers.google.com/google-ads/api/docs/concepts/call-structure#cid
>> "
>> }
>>
>> 
>>
>>
>> Best Regards,
>> Hubble App
>>
>

-- 
-- 
=~=~=~=~=~=~=~=~=~=~=~=~=~=~=~=~=~=~=~=~=~=~=~=~
Also find us on our blog:
https://googleadsdeveloper.blogspot.com/
=~=~=~=~=~=~=~=~=~=~=~=~=~=~=~=~=~=~=~=~=~=~=~=~

You received this message because you are subscribed to the Google
Groups "AdWords API and Google Ads API Forum" group.
To post to this group, send email to adwords-api@googlegroups.com
To unsubscribe from this group, send email to
adwords-api+unsubscr...@googlegroups.com
For more options, visit this group at
http://groups.google.com/group/adwords-api?hl=en
--- 
You received this message because you are subscribed to the Google Groups 
"AdWords API and Google Ads API Forum" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to adwords-api+unsubscr...@googlegroups.com.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/adwords-api/ae2e9d69-2d06-4920-8cab-56ce5763aa90n%40googlegroups.com.

Re: authorization_error: USER_PERMISSION_DENIED

[Pavel Hegler]

I had same issue and fixed it here 
. Pls take a look:)

app.h...@nbcuni.com schrieb am Mittwoch, 17. März 2021 um 09:06:26 UTC+1:

> Hello Team,
>
> We are getting the below response from 1st March 2021 & before that it ran 
> fine. We suspect this to be something related to token expiration (Please 
> refer below logs).
>
> Request: customer_id: "2900486729" 
>
>  FYI : For sharing more details for access token etc., we don't have 
> "reply to author privately" option to enabled.  
>
> Logs: 
> ##
> Method: /google.ads.googleads.v5.services.GoogleAdsService/Search
> Host: googleads.googleapis.com:443
> Headers: {
> "developer-token": "REDACTED",
> "login-customer-id": "2900486729",
> "x-goog-api-client": "gl-python/3.9.0 grpc/1.33.2 gax/1.23.0 gapic/8.0.0",
> "x-goog-request-params": "customer_id=2900486729"
> }
> Request: customer_id: "2900486729"
> query: "SELECT\n\t campaign.name,\n\t campaign.id,\n\t 
> campaign.status,\n\t ad_group.name,\n\t ad_group.id,\n\t 
> ad_group.status,\n\t ad_group_ad.ad.id,\n\t ad_group_ad.ad.name,\n\t 
> ad_group_ad.ad.image_ad.name,\n\t ad_group_ad.status,\n 
> metrics.impressions,\n\t metrics.clicks,\n\t metrics.cost_micros,\n\t 
> metrics.ctr,\n\t metrics.average_cpc,\n\t metrics.average_cost,\n\t 
> metrics.average_cpm,\n\t segments.date,\n\t segments.device,\n\t 
> segments.ad_network_type,\n \t 
> segments.click_type\nFROM\n\tad_group_ad\nWHERE\n\tsegments.date BETWEEN 
> \'2021-03-16\' AND \'2021-03-16\'"
> page_size: 50
>
> Response
> ---
> Headers: {
> "google.ads.googleads.v5.errors.googleadsfailure-bin": 
> "\n\u0001\n\u0002H\u0002\u0012\u0001User doesn't have permission to access 
> customer. Note: If you're accessing a client customer, the manager's 
> customer id must be set in the 'login-customer-id' header. See 
> https://developers.google.com/google-ads/api/docs/concepts/call-structure#cid
> ",
> "grpc-status-details-bin": "\b\u0007\u0012#The caller does not have 
> permission\u001a\u0002\
> nCtype.googleapis.com/google.ads.googleads.v5.errors.GoogleAdsFailure\u0012\u0002\n\u0001\n\u0002H\u0002\u0012\u0001User
>  
> 
>  
> doesn't have permission to access customer. Note: If you're accessing a 
> client customer, the manager's customer id must be set in the 
> 'login-customer-id' header. See 
> https://developers.google.com/google-ads/api/docs/concepts/call-structure#cid
> ",
> "request-id": "MQiYxhCMioS-s02kGyfz5g"
> }
> Fault: errors {
> error_code {
> authorization_error: USER_PERMISSION_DENIED
> }
> message: "User doesn\'t have permission to access customer. Note: If 
> you\'re accessing a client customer, the manager\'s customer id must be set 
> in the \'login-customer-id\' header. See 
> https://developers.google.com/google-ads/api/docs/concepts/call-structure#cid
> "
> }
>
> 
>
>
> Best Regards,
> Hubble App
>

-- 
-- 
=~=~=~=~=~=~=~=~=~=~=~=~=~=~=~=~=~=~=~=~=~=~=~=~
Also find us on our blog:
https://googleadsdeveloper.blogspot.com/
=~=~=~=~=~=~=~=~=~=~=~=~=~=~=~=~=~=~=~=~=~=~=~=~

You received this message because you are subscribed to the Google
Groups "AdWords API and Google Ads API Forum" group.
To post to this group, send email to adwords-api@googlegroups.com
To unsubscribe from this group, send email to
adwords-api+unsubscr...@googlegroups.com
For more options, visit this group at
http://groups.google.com/group/adwords-api?hl=en
--- 
You received this message because you are subscribed to the Google Groups 
"AdWords API and Google Ads API Forum" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to adwords-api+unsubscr...@googlegroups.com.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/adwords-api/f43c7c7b-f0b6-4cb4-9027-7b4a6ee53701n%40googlegroups.com.