Hi Hans, If the client account enables the "2-Step verification" then the google account of the user who is accessing this account should also be setup for 2-Step verification. In this case, the user on the MCC account who is accessing the client account should have the specific google account setup for 2-Step verification. It is not required to generate a new refresh token. The error TWO_STEP_VERIFICATION_NOT_ENROLLED is expected from V201806 onward if you are using a lower version, you might see a USER_PERMISSION_DENIED error.
Let me know if you have any additional questions. Thanks, Milind, AdWords API Team -- -- =~=~=~=~=~=~=~=~=~=~=~=~=~=~=~=~=~=~=~=~=~=~=~=~ Also find us on our blog: https://googleadsdeveloper.blogspot.com/ =~=~=~=~=~=~=~=~=~=~=~=~=~=~=~=~=~=~=~=~=~=~=~=~ You received this message because you are subscribed to the Google Groups "AdWords API and Google Ads API Forum" group. To post to this group, send email to adwords-api@googlegroups.com To unsubscribe from this group, send email to adwords-api+unsubscr...@googlegroups.com For more options, visit this group at http://groups.google.com/group/adwords-api?hl=en --- You received this message because you are subscribed to the Google Groups "AdWords API and Google Ads API Forum" group. To unsubscribe from this group and stop receiving emails from it, send an email to adwords-api+unsubscr...@googlegroups.com. Visit this group at https://groups.google.com/group/adwords-api. To view this discussion on the web visit https://groups.google.com/d/msgid/adwords-api/bea2a433-d879-4c7e-8ba3-263f23e214e1%40googlegroups.com. For more options, visit https://groups.google.com/d/optout.
