Hi,
I'm blocked by a persistent PERMISSION_DENIED error when trying to make a simple, read-only query to a Google Ads Test Account. I can get a new refresh token, and I can successfully use that refresh token to get a new access token. However, when I use those same credentials to make an API call, I get PERMISSION_DENIED, even though the UI confirms my user has "Admin" access on both the Manager and the Test account. ------------------------------ *Failing Request Details:* - *Target Customer ID:* [TEST_ACCOUNT_ID] - *Manager Account (for login-customer-id header):* [MANAGER_ACCOUNT_ID] - *GAQL Query:* SELECT campaign.id, campaign.name FROM campaign *Exact Error Message:* Error: PERMISSION_DENIED Message: User doesn't have permission to access customer. Note: If you're accessing a client customer, the manager's customer id must be set in the 'login-customer-id' header. *Summary of Troubleshooting Already Performed:* - *GCP Project:* Confirmed OAuth Consent Screen is "In Production" and the Google Ads API is enabled. - *Ads Account Hierarchy:* Confirmed a simple hierarchy (1 Manager, 1 Test Account) and that my user has "Admin" access to *both* accounts in the UI. The Test Account is active and has a sample campaign. - *Token Validity:* Confirmed via a standalone script that a fresh token (obtained after revoking app access on myaccount.google.com/permissions) can be successfully refreshed. - *Code/Config:* Confirmed the correct [MANAGER_ACCOUNT_ID] is used for the login-customer-id and the correct Developer Token is used. Given that the token refresh is successful and the user permissions appear correct in the UI, what could be the remaining cause for a PERMISSION_DENIED error? Are there known issues with permission propagation or other settings not visible in the "Access and security" screen? Thank you. -- -- =~=~=~=~=~=~=~=~=~=~=~=~=~=~=~=~=~=~=~=~=~=~=~=~ Also find us on our blog: https://googleadsdeveloper.blogspot.com/ =~=~=~=~=~=~=~=~=~=~=~=~=~=~=~=~=~=~=~=~=~=~=~=~ You received this message because you are subscribed to the Google Groups "AdWords API and Google Ads API Forum" group. To post to this group, send email to [email protected] To unsubscribe from this group, send email to [email protected] For more options, visit this group at http://groups.google.com/group/adwords-api?hl=en --- You received this message because you are subscribed to the Google Groups "Google Ads API and AdWords API Forum" group. To unsubscribe from this group and stop receiving emails from it, send an email to [email protected]. To view this discussion visit https://groups.google.com/d/msgid/adwords-api/88227769-edad-4e67-8958-b9d4eef245e8n%40googlegroups.com.
