Hi Martin, A service account can only be used with the Google Accounts in the mydomain.com space, you cannot impersonate a @gmail.com Google account that is not in the @mydomain.com domain with a service account. The 'sub' field can only be filled with a Google Account that is in the Google Workspace domain. here is the note under Setting up service account access that explains this.
If the above doesn't help, could you send us your JWT claim set and a 'DEBUG' log level request and response log of raw API communications that gets you this error? The request and response appears similar to the JSON Mappings in our REST documentation with additional headers and information such as request Id. If you are using our REST interface then the full multi line curl command line is a request log and adding curl command line option '-i' will also generate a response log. Regards, Aryeh Google Ads API Team ref:_00D1U1174p._5004Q2do6N4:ref -- -- =~=~=~=~=~=~=~=~=~=~=~=~=~=~=~=~=~=~=~=~=~=~=~=~ Also find us on our blog: https://googleadsdeveloper.blogspot.com/ =~=~=~=~=~=~=~=~=~=~=~=~=~=~=~=~=~=~=~=~=~=~=~=~ You received this message because you are subscribed to the Google Groups "AdWords API and Google Ads API Forum" group. To post to this group, send email to [email protected] To unsubscribe from this group, send email to [email protected] For more options, visit this group at http://groups.google.com/group/adwords-api?hl=en --- You received this message because you are subscribed to the Google Groups "Google Ads API and AdWords API Forum" group. To unsubscribe from this group and stop receiving emails from it, send an email to [email protected]. To view this discussion on the web visit https://groups.google.com/d/msgid/adwords-api/5LQKT000000000000000000000000000000000000000000000RH8MOX00rVLwQRFHR8SguDFlI97k-Q%40sfdc.net.
