Hi Google Ads API Team,

I have two MCC accounts under my GCP account.
Originally, there was only one account, and with the first account, I 
obtained a refresh_token, client_id, and client_secret.
Using the developer-token and login-customer-id from the first MCC account, 
I can successfully retrieve the information I need by calling the following 
API:

requestUrl = 
https://googleads.googleapis.com/v17/customers/login-customer-id/googleAds:searchStream

requestString = {"query":"SELECT customer_client.client_customer, 
customer_client.descriptive_name, customer_client.time_zone, 
customer_client.id FROM customer_client WHERE customer_client.level <= 1 
AND customer_client.status = 'ENABLED'"}

However, with the newly added MCC account, using the same refresh_token, 
client_id, and client_secret, but replacing with the new MCC account’s 
developer-token and login-customer-id, I get the following error:

[{
  "error": {
    "code": 403,
    "message": "The caller does not have permission",
    "status": "PERMISSION_DENIED",
    "details": [
      {
        "@type": 
"type.googleapis.com/google.ads.googleads.v17.errors.GoogleAdsFailure",
        "errors": [
          {
            "errorCode": {
              "authorizationError": "USER_PERMISSION_DENIED"
            },
            "message": "User doesn't have permission to access customer. 
Note: If you're accessing a client customer, the manager's customer id must 
be set in the 'login-customer-id' header. See 
https://developers.google.com/google-ads/api/docs/concepts/call-structure#cid";
          }
        ],
        "requestId": "saB0ALwweWxAmkTgmy4t6Q"
      }
    ]
  }
}
]

I have confirmed that the new MCC account’s developer-token has basic 
access, and the account has been granted the necessary permissions.

What else could cause a USER_PERMISSION_DENIED error?

-- 
-- 
=~=~=~=~=~=~=~=~=~=~=~=~=~=~=~=~=~=~=~=~=~=~=~=~
Also find us on our blog:
https://googleadsdeveloper.blogspot.com/
=~=~=~=~=~=~=~=~=~=~=~=~=~=~=~=~=~=~=~=~=~=~=~=~

You received this message because you are subscribed to the Google
Groups "AdWords API and Google Ads API Forum" group.
To post to this group, send email to adwords-api@googlegroups.com
To unsubscribe from this group, send email to
adwords-api+unsubscr...@googlegroups.com
For more options, visit this group at
http://groups.google.com/group/adwords-api?hl=en
--- 
You received this message because you are subscribed to the Google Groups 
"Google Ads API and AdWords API Forum" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to adwords-api+unsubscr...@googlegroups.com.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/adwords-api/e7864b81-c226-4b18-80b7-af9fa74153aen%40googlegroups.com.

Reply via email to