403 Error for link after gam user [email protected] check serviceaccount

[idannyg]

When I go to the link after the gam user [email protected] check serviceaccount, I get an Error 403 "We're sorry, but you do not have access to this page. That’s all we know." Not sure if it's something I did wrong but possibly the step before this. Not sure what scopes would be necessary. After doing the command the results look like this:

C:>gam user @.org check serviceaccount
System time status
Your system time differs from admin.googleapis.com by 27 seconds PASS
Service Account Private Key Authentication
Authentication PASS
Service Account Private Key age; Google recommends rotating keys on a routine basis
Service Account Private Key age: 0 days PASS
Domain-wide Delegation authentication:, User: @.org, Scopes: 39
https://mail.google.com/ FAIL (1/39)
https://sites.google.com/feeds FAIL (2/39)
https://www.googleapis.com/auth/analytics.readonly FAIL (3/39)
https://www.googleapis.com/auth/apps.alerts FAIL (4/39)
https://www.googleapis.com/auth/calendar FAIL (5/39)
https://www.googleapis.com/auth/chat.admin.delete FAIL (6/39)
https://www.googleapis.com/auth/chat.admin.memberships FAIL (7/39)
https://www.googleapis.com/auth/chat.admin.spaces FAIL (8/39)
https://www.googleapis.com/auth/chat.delete FAIL (9/39)
https://www.googleapis.com/auth/chat.memberships FAIL (10/39)
https://www.googleapis.com/auth/chat.messages FAIL (11/39)
https://www.googleapis.com/auth/chat.spaces FAIL (12/39)
https://www.googleapis.com/auth/classroom.announcements FAIL (13/39)
https://www.googleapis.com/auth/classroom.coursework.students FAIL (14/39)
https://www.googleapis.com/auth/classroom.courseworkmaterials FAIL (15/39)
https://www.googleapis.com/auth/classroom.profile.emails FAIL (16/39)
https://www.googleapis.com/auth/classroom.profile.photos FAIL (17/39)
https://www.googleapis.com/auth/classroom.rosters FAIL (18/39)
https://www.googleapis.com/auth/classroom.topics FAIL (19/39)
https://www.googleapis.com/auth/cloud-identity FAIL (20/39)
https://www.googleapis.com/auth/cloud-platform FAIL (21/39)
https://www.googleapis.com/auth/contacts FAIL (22/39)
https://www.googleapis.com/auth/contacts.other.readonly FAIL (23/39)
https://www.googleapis.com/auth/datastudio FAIL (24/39)
https://www.googleapis.com/auth/directory.readonly FAIL (25/39)
https://www.googleapis.com/auth/documents FAIL (26/39)
https://www.googleapis.com/auth/drive FAIL (27/39)
https://www.googleapis.com/auth/drive.activity FAIL (28/39)
https://www.googleapis.com/auth/drive.admin.labels FAIL (29/39)
https://www.googleapis.com/auth/drive.labels FAIL (30/39)
https://www.googleapis.com/auth/gmail.modify FAIL (31/39)
https://www.googleapis.com/auth/gmail.settings.basic FAIL (32/39)
https://www.googleapis.com/auth/gmail.settings.sharing FAIL (33/39)
https://www.googleapis.com/auth/keep FAIL (34/39)
https://www.googleapis.com/auth/meetings.space.created FAIL (35/39)
https://www.googleapis.com/auth/spreadsheets FAIL (36/39)
https://www.googleapis.com/auth/tasks FAIL (37/39)
https://www.googleapis.com/auth/userinfo.profile FAIL (38/39)
https://www.googleapis.com/auth/youtube.readonly FAIL (39/39)
Some scopes FAILED!
To authorize them, please go to the following link in your browser:

https://gam-shortn.appspot.com/*****

You will be directed to the Google Workspace admin console Security > API Controls > Domain-wide Delegation page
The "Add a new Client ID" box will open
Make sure that "Overwrite existing client ID" is checked
Click AUTHORIZE
When the box closes you're done
After authorizing it may take some time for this test to pass so wait a few moments and then try this command again.

Assistance would be greatly appreciated.

[taers232c]

Be logged on as a superadmin and then paste in the link. Ross ---- Ross Scroggs ***@***.***

…

On Oct 1, 2024, at 12:03 PM, idannyg ***@***.***> wrote: When I go to the link after the gam user ***@***.*** ***@***.***> check serviceaccount, I get an Error 403 "We're sorry, but you do not have access to this page. That’s all we know." Not sure if it's something I did wrong but possibly the step before this. Not sure what scopes would be necessary. After doing the command the results look like this: C:>gam user @.org check serviceaccount System time status Your system time differs from admin.googleapis.com by 27 seconds PASS Service Account Private Key Authentication Authentication PASS Service Account Private Key age; Google recommends rotating keys on a routine basis Service Account Private Key age: 0 days PASS Domain-wide Delegation authentication:, User: @.org, Scopes: 39 https://mail.google.com/ FAIL (1/39) https://sites.google.com/feeds FAIL (2/39) https://www.googleapis.com/auth/analytics.readonly FAIL (3/39) https://www.googleapis.com/auth/apps.alerts FAIL (4/39) https://www.googleapis.com/auth/calendar FAIL (5/39) https://www.googleapis.com/auth/chat.admin.delete FAIL (6/39) https://www.googleapis.com/auth/chat.admin.memberships FAIL (7/39) https://www.googleapis.com/auth/chat.admin.spaces FAIL (8/39) https://www.googleapis.com/auth/chat.delete FAIL (9/39) https://www.googleapis.com/auth/chat.memberships FAIL (10/39) https://www.googleapis.com/auth/chat.messages FAIL (11/39) https://www.googleapis.com/auth/chat.spaces FAIL (12/39) https://www.googleapis.com/auth/classroom.announcements FAIL (13/39) https://www.googleapis.com/auth/classroom.coursework.students FAIL (14/39) https://www.googleapis.com/auth/classroom.courseworkmaterials FAIL (15/39) https://www.googleapis.com/auth/classroom.profile.emails FAIL (16/39) https://www.googleapis.com/auth/classroom.profile.photos FAIL (17/39) https://www.googleapis.com/auth/classroom.rosters FAIL (18/39) https://www.googleapis.com/auth/classroom.topics FAIL (19/39) https://www.googleapis.com/auth/cloud-identity FAIL (20/39) https://www.googleapis.com/auth/cloud-platform FAIL (21/39) https://www.googleapis.com/auth/contacts FAIL (22/39) https://www.googleapis.com/auth/contacts.other.readonly FAIL (23/39) https://www.googleapis.com/auth/datastudio FAIL (24/39) https://www.googleapis.com/auth/directory.readonly FAIL (25/39) https://www.googleapis.com/auth/documents FAIL (26/39) https://www.googleapis.com/auth/drive FAIL (27/39) https://www.googleapis.com/auth/drive.activity FAIL (28/39) https://www.googleapis.com/auth/drive.admin.labels FAIL (29/39) https://www.googleapis.com/auth/drive.labels FAIL (30/39) https://www.googleapis.com/auth/gmail.modify FAIL (31/39) https://www.googleapis.com/auth/gmail.settings.basic FAIL (32/39) https://www.googleapis.com/auth/gmail.settings.sharing FAIL (33/39) https://www.googleapis.com/auth/keep FAIL (34/39) https://www.googleapis.com/auth/meetings.space.created FAIL (35/39) https://www.googleapis.com/auth/spreadsheets FAIL (36/39) https://www.googleapis.com/auth/tasks FAIL (37/39) https://www.googleapis.com/auth/userinfo.profile FAIL (38/39) https://www.googleapis.com/auth/youtube.readonly FAIL (39/39) Some scopes FAILED! To authorize them, please go to the following link in your browser: https://gam-shortn.appspot.com/***** You will be directed to the Google Workspace admin console Security > API Controls > Domain-wide Delegation page The "Add a new Client ID" box will open Make sure that "Overwrite existing client ID" is checked Click AUTHORIZE When the box closes you're done After authorizing it may take some time for this test to pass so wait a few moments and then try this command again. Assistance would be greatly appreciated. — Reply to this email directly, view it on GitHub <#440>, or unsubscribe <https://github.com/notifications/unsubscribe-auth/ACCTYL5S3B7GJTQJAVMXBILZZLWY7AVCNFSM6AAAAABPGGXK6WVHI2DSMVQWIX3LMV43ASLTON2WKOZSGU2TSOJYGIYTQMY>. You are receiving this because you are subscribed to this thread.