ERROR: 403: Not Authorized to access this resource/api - forbidden #461

jhavens12 · 2017-03-30T18:23:02Z

The issue tracker is for reporting product deficiencies. "How do I?" questions should be posted to the discussion forum at https://groups.google.com/group/google-apps-manager. When in doubt, start at the discussion forum and return here only when instructed to do so.

Please confirm the following:

I have upgraded to the latest GAM release from https://git.io/gamreleases and I still have this issue.
I am typing the command as described in the GAM Wiki at https://github.com/jay0lee/gam/wiki

Full steps to reproduce the issue:

gam info user XXXX

Expected outcome (what are you trying to do?):
I am trying to run any command with GAM
Actual outcome (what errors or bad behavior do you see instead?):
ERROR: 403: Not Authorized to access this resource/api - forbidden

I have uninstalled and reinstalled, created a new project and run through all of the install steps. My credentials pass when tested and this was working properly until it updated to 4.1 (Am on current 4.2 as of writing this and issue persists.)

Katun79 · 2017-03-30T18:41:19Z

Hello
You need to authorize this apis in your panel:

https://www.googleapis.com/auth/apps.groups.settings

Bye

jhavens12 · 2017-03-31T12:00:59Z

Thanks for the response but that link does not go anywhere

taers232c · 2017-03-31T15:12:46Z

What do these commands output? gam oauth info gam user someuser@yourdaomain.com check serviceaccount Riss

…

On Fri, Mar 31, 2017 at 5:01 AM, jhavens12 ***@***.***> wrote: Thanks for the response but that link does not go anywhere — You are receiving this because you are subscribed to this thread. Reply to this email directly, view it on GitHub <#461 (comment)>, or mute the thread <https://github.com/notifications/unsubscribe-auth/AIU8LxL-bw29VsEt_HVwXogfmy4Qzrviks5rrOr9gaJpZM4MuvS6> .

-- Ross Scroggs ross.scroggs@gmail.com

jhavens12 · 2017-03-31T19:15:57Z

gam oauth info:

OAuth File: /Users/USER/bin/gam/oauth2.txt
client ID: XXX
Secret: XXX

gam user someuser@mydomain.com check serviceaccount:

User: someuser@mydomain.com
Scope: https://mail.google.com/ PASS
Scope: https://www.googleapis.com/auth/activity PASS
Scope: https://www.googleapis.com/auth/calendar PASS
Scope: https://www.googleapis.com/auth/drive PASS
Scope: https://www.googleapis.com/auth/gmail.settings.basic PASS
Scope: https://www.googleapis.com/auth/gmail.settings.sharing PASS
Scope: https://www.googleapis.com/auth/plus.me PASS

All scopes passed!
Service account XXX is fully authorized.

jay0lee · 2017-03-31T19:32:59Z

You need to reauthorize GAM 4.2. Try: gam oauth revoke gam info domain the first command will revoke your existing authorization, the second will walk you through re-authorizing. Commands should work fine once that's done. Jay

…

jhavens12 · 2017-04-03T11:50:27Z

Thanks that did eventually work even though I had tried it earlier last week. so I'm not sure whats different now but it is working correctly. Thank you.

kborecky · 2017-05-10T17:53:35Z

This did the trick for me! (and I loved the self-destruct countdown :-) :-)

Thank you, Jay - and thanks for GAM! It's essential.

Karla B

kc8zpi · 2017-11-28T19:06:03Z

Jay, I'm having the same 403 issue with 4.32. I have run the oauth revoke and info domain a couple of times. I'm showing 30 scopes in my oauth info and the user I'm having issues with is showing PASS in all areas of check service account.

C:\GAM>gam info domain
Customer ID: C01smq76h
Primary Domain: xxx
Primary Domain Verified: True
Customer Creation Time: 2012-07-10T13:35:03.203Z
Default Language: en
Address:
organizationName: xxx
countryCode: US
Admin Secondary Email: xxx
User counts as of 2017-11-26:
Total Users: 3,283

C:\GAM>gam oauth info

C:\GAM>gam csv e:\export\google\brown-pass.csv gam update user ~Email password ~Password changepassword off >> RESULT-SetPasswords.txt
Using 1 processes...

ERROR: 403: Not Authorized to access this resource/api - forbidden

C:\GAM>gam user user@domain.com check serviceaccount
User: user@domain.com
Scope: https://mail.google.com/ PASS
Scope: https://www.googleapis.com/auth/activity PASS
Scope: https://www.googleapis.com/auth/calendar PASS
Scope: https://www.googleapis.com/auth/drive PASS
Scope: https://www.googleapis.com/auth/gmail.settings.basic PASS
Scope: https://www.googleapis.com/auth/gmail.settings.sharing PASS
Scope: https://www.googleapis.com/auth/plus.me PASS

All scopes passed!
Service account xxx is fully authorized.

C:\GAM>gam csv e:\export\google\brown-pass.csv gam update user ~Email password ~Password changepassword off >> RESULT-SetPasswords.txt
Using 1 processes...

ERROR: 403: Not Authorized to access this resource/api - forbidden

C:\GAM>

taers232c · 2017-11-28T21:55:40Z

What command are you trying to execute? Ross

…

On Tue, Nov 28, 2017 at 11:06 AM, kc8zpi ***@***.***> wrote: Jay, I'm having the same 403 issue with 4.32. I have run the oauth revoke and info domain a couple of times. I'm showing 30 scopes in my oauth info and the user I'm having issues with is showing PASS in all areas of check service account. — You are receiving this because you commented. Reply to this email directly, view it on GitHub <#461 (comment)>, or mute the thread <https://github.com/notifications/unsubscribe-auth/AIU8LyoTfLp048kuC-YOlfGTf2KCGLjdks5s7FmfgaJpZM4MuvS6> .

-- Ross Scroggs ross.scroggs@gmail.com

kc8zpi · 2017-11-28T22:21:22Z

The command is at the bottom of my message. It's this one. gam csv e:/export/googlebrown-pass.csv gam update user ~Email password ~Password changepassword off >> RESULT-SetPasswords.txt Sent from my Verizon, Samsung Galaxy smartphone

…

-------- Original message -------- From: Ross Scroggs <notifications@github.com> Date: 11/28/17 4:55 PM (GMT-05:00) To: jay0lee/GAM <GAM@noreply.github.com> Cc: Ryan Kelley <kelleyr@bas-k12.org>, Comment <comment@noreply.github.com> Subject: Re: [jay0lee/GAM] ERROR: 403: Not Authorized to access this resource/api - forbidden (#461) What command are you trying to execute? Ross

On Tue, Nov 28, 2017 at 11:06 AM, kc8zpi ***@***.***> wrote: Jay, I'm having the same 403 issue with 4.32. I have run the oauth revoke and info domain a couple of times. I'm showing 30 scopes in my oauth info and the user I'm having issues with is showing PASS in all areas of check service account. - You are receiving this because you commented. Reply to this email directly, view it on GitHub <#461 (comment)>, or mute the thread <https://github.com/notifications/unsubscribe-auth/AIU8LyoTfLp048kuC-YOlfGTf2KCGLjdks5s7FmfgaJpZM4MuvS6> .

-- Ross Scroggs ross.scroggs@gmail.com - You are receiving this because you commented. Reply to this email directly, view it on GitHub<#461 (comment)>, or mute the thread<https://github.com/notifications/unsubscribe-auth/AgfqfFJFAWR1_Nsz1g5VwrM-xn4UxPX3ks5s7IFlgaJpZM4MuvS6>.

taers232c · 2017-11-28T22:34:59Z

Do the following: gam oauth info The last line of the output is: G Suite Admin: user@domain.com Fill in that user name in this command: gam print admins user user@domain.com What roles does user@domain.com have? My super user has: _SEED_ADMIN_ROLE, _GROUPS_ADMIN_ROLE, _SERVICE_ADMIN_ROLE What is the scopeType for each role? Ross

…

On Tue, Nov 28, 2017 at 2:21 PM, kc8zpi ***@***.***> wrote: The command is at the bottom of my message. It's this one. gam csv e:/export/google brown-pass.csv gam update user ~Email password ~Password changepassword off >> RESULT-SetPasswords.txt Sent from my Verizon, Samsung Galaxy smartphone -------- Original message -------- From: Ross Scroggs ***@***.***> Date: 11/28/17 4:55 PM (GMT-05:00) To: jay0lee/GAM ***@***.***> Cc: Ryan Kelley ***@***.***>, Comment ***@***.*** > Subject: Re: [jay0lee/GAM] ERROR: 403: Not Authorized to access this resource/api - forbidden (#461) What command are you trying to execute? Ross On Tue, Nov 28, 2017 at 11:06 AM, kc8zpi ***@***.***> wrote: > Jay, I'm having the same 403 issue with 4.32. I have run the oauth revoke > and info domain a couple of times. I'm showing 30 scopes in my oauth info > and the user I'm having issues with is showing PASS in all areas of check > service account. > > - > You are receiving this because you commented. > Reply to this email directly, view it on GitHub > <#461 (comment)>, or mute > the thread > <https://github.com/notifications/unsubscribe-auth/AIU8LyoTfLp048kuC- YOlfGTf2KCGLjdks5s7FmfgaJpZM4MuvS6> > . > -- Ross Scroggs ***@***.*** - You are receiving this because you commented. Reply to this email directly, view it on GitHub<https://github.com/ GAM-team/GAM#461#issuecomment-347676585>, or mute the thread< https://github.com/notifications/unsubscribe-auth/AgfqfFJFAWR1_Nsz1g5VwrM- xn4UxPX3ks5s7IFlgaJpZM4MuvS6>. — You are receiving this because you commented. Reply to this email directly, view it on GitHub <#461 (comment)>, or mute the thread <https://github.com/notifications/unsubscribe-auth/AIU8L1Nm6h7zPTEouED76LTvX8NA0rXoks5s7IdlgaJpZM4MuvS6> .

-- Ross Scroggs ross.scroggs@gmail.com

kc8zpi · 2017-11-28T23:43:55Z

My admin account just had the _SEED_ADMIN_ROLE?. I added Services Admin, User Management, Group Admin. I am still getting the ERROR: 403: Not Authorized to access this resource/api - forbidden?

…

________________________________ From: Ross Scroggs <notifications@github.com> Sent: Tuesday, November 28, 2017 5:35 PM To: jay0lee/GAM Cc: Ryan Kelley; Comment Subject: Re: [jay0lee/GAM] ERROR: 403: Not Authorized to access this resource/api - forbidden (#461) Do the following: gam oauth info The last line of the output is: G Suite Admin: user@domain.com Fill in that user name in this command: gam print admins user user@domain.com What roles does user@domain.com have? My super user has: _SEED_ADMIN_ROLE, _GROUPS_ADMIN_ROLE, _SERVICE_ADMIN_ROLE What is the scopeType for each role? Ross

On Tue, Nov 28, 2017 at 2:21 PM, kc8zpi ***@***.***> wrote: The command is at the bottom of my message. It's this one. gam csv e:/export/google brown-pass.csv gam update user ~Email password ~Password changepassword off >> RESULT-SetPasswords.txt Sent from my Verizon, Samsung Galaxy smartphone -------- Original message -------- From: Ross Scroggs ***@***.***> Date: 11/28/17 4:55 PM (GMT-05:00) To: jay0lee/GAM ***@***.***> Cc: Ryan Kelley ***@***.***>, Comment ***@***.*** > Subject: Re: [jay0lee/GAM] ERROR: 403: Not Authorized to access this resource/api - forbidden (#461) What command are you trying to execute? Ross On Tue, Nov 28, 2017 at 11:06 AM, kc8zpi ***@***.***> wrote: > Jay, I'm having the same 403 issue with 4.32. I have run the oauth revoke > and info domain a couple of times. I'm showing 30 scopes in my oauth info > and the user I'm having issues with is showing PASS in all areas of check > service account. > > - > You are receiving this because you commented. > Reply to this email directly, view it on GitHub > <#461 (comment)>, or mute > the thread > <https://github.com/notifications/unsubscribe-auth/AIU8LyoTfLp048kuC- YOlfGTf2KCGLjdks5s7FmfgaJpZM4MuvS6> > . > -- Ross Scroggs ***@***.*** - You are receiving this because you commented. Reply to this email directly, view it on GitHub<https://github.com/ GAM-team/GAM#461#issuecomment-347676585>, or mute the thread< https://github.com/notifications/unsubscribe-auth/AgfqfFJFAWR1_Nsz1g5VwrM- xn4UxPX3ks5s7IFlgaJpZM4MuvS6>. - You are receiving this because you commented. Reply to this email directly, view it on GitHub <#461 (comment)>, or mute the thread <https://github.com/notifications/unsubscribe-auth/AIU8L1Nm6h7zPTEouED76LTvX8NA0rXoks5s7IdlgaJpZM4MuvS6> .

-- Ross Scroggs ross.scroggs@gmail.com - You are receiving this because you commented. Reply to this email directly, view it on GitHub<#461 (comment)>, or mute the thread<https://github.com/notifications/unsubscribe-auth/AgfqfMppJ_hTDvqQ5niGW4Yo05ie4z8qks5s7IqYgaJpZM4MuvS6>.

taers232c · 2017-11-29T00:19:49Z

From your gam oauth info, does the domain from: G Suite Admin: user@domain.com Match the domain of the test user? Ross

…

On Tue, Nov 28, 2017 at 3:44 PM, kc8zpi ***@***.***> wrote: My admin account just had the _SEED_ADMIN_ROLE?. I added Services Admin, User Management, Group Admin. I am still getting the ERROR: 403: Not Authorized to access this resource/api - forbidden? ________________________________ From: Ross Scroggs ***@***.***> Sent: Tuesday, November 28, 2017 5:35 PM To: jay0lee/GAM Cc: Ryan Kelley; Comment Subject: Re: [jay0lee/GAM] ERROR: 403: Not Authorized to access this resource/api - forbidden (#461) Do the following: gam oauth info The last line of the output is: G Suite Admin: ***@***.*** Fill in that user name in this command: gam print admins user ***@***.*** What roles does ***@***.*** have? My super user has: _SEED_ADMIN_ROLE, _GROUPS_ADMIN_ROLE, _SERVICE_ADMIN_ROLE What is the scopeType for each role? Ross On Tue, Nov 28, 2017 at 2:21 PM, kc8zpi ***@***.***> wrote: > The command is at the bottom of my message. It's this one. > > gam csv e:/export/google brown-pass.csv gam update user ~Email password > ~Password changepassword off >> RESULT-SetPasswords.txt > > > > Sent from my Verizon, Samsung Galaxy smartphone > > > -------- Original message -------- > From: Ross Scroggs ***@***.***> > Date: 11/28/17 4:55 PM (GMT-05:00) > To: jay0lee/GAM ***@***.***> > Cc: Ryan Kelley ***@***.***>, Comment < ***@***.*** > > > Subject: Re: [jay0lee/GAM] ERROR: 403: Not Authorized to access this > resource/api - forbidden (#461) > > What command are you trying to execute? > > Ross > > On Tue, Nov 28, 2017 at 11:06 AM, kc8zpi ***@***.***> wrote: > > > Jay, I'm having the same 403 issue with 4.32. I have run the oauth revoke > > and info domain a couple of times. I'm showing 30 scopes in my oauth info > > and the user I'm having issues with is showing PASS in all areas of check > > service account. > > > > - > > You are receiving this because you commented. > > Reply to this email directly, view it on GitHub > > <#461 (comment)>, or > mute > > the thread > > <https://github.com/notifications/unsubscribe-auth/AIU8LyoTfLp048kuC- > YOlfGTf2KCGLjdks5s7FmfgaJpZM4MuvS6> > > . > > > > > > -- > Ross Scroggs > ***@***.*** > > - > You are receiving this because you commented. > Reply to this email directly, view it on GitHub<https://github.com/ > GAM-team/GAM#461#issuecomment-347676585>, or mute the thread< > https://github.com/notifications/unsubscribe- auth/AgfqfFJFAWR1_Nsz1g5VwrM- > xn4UxPX3ks5s7IFlgaJpZM4MuvS6>. > > - > You are receiving this because you commented. > Reply to this email directly, view it on GitHub > <#461 (comment)>, or mute > the thread > <https://github.com/notifications/unsubscribe-auth/ AIU8L1Nm6h7zPTEouED76LTvX8NA0rXoks5s7IdlgaJpZM4MuvS6> > . > -- Ross Scroggs ***@***.*** - You are receiving this because you commented. Reply to this email directly, view it on GitHub<https://github.com/ GAM-team/GAM#461#issuecomment-347687046>, or mute the thread< https://github.com/notifications/unsubscribe-auth/AgfqfMppJ_ hTDvqQ5niGW4Yo05ie4z8qks5s7IqYgaJpZM4MuvS6>. — You are receiving this because you commented. Reply to this email directly, view it on GitHub <#461 (comment)>, or mute the thread <https://github.com/notifications/unsubscribe-auth/AIU8L3abHM1_uQAQR-8wOf3ugS2NqVHsks5s7JrDgaJpZM4MuvS6> .

-- Ross Scroggs ross.scroggs@gmail.com

kc8zpi · 2017-11-29T00:24:15Z

No. The G suite admin is my admin@domain account and my test user is a new student account. Sorry for the confusion .

…

Sent from my iPad On Nov 28, 2017, at 7:20 PM, Ross Scroggs <notifications@github.com<mailto:notifications@github.com>> wrote: From your gam oauth info, does the domain from: G Suite Admin: user@domain.com<mailto:user@domain.com> Match the domain of the test user? Ross

On Tue, Nov 28, 2017 at 3:44 PM, kc8zpi ***@***.******@***.***>> wrote: My admin account just had the _SEED_ADMIN_ROLE?. I added Services Admin, User Management, Group Admin. I am still getting the ERROR: 403: Not Authorized to access this resource/api - forbidden? ________________________________ From: Ross Scroggs ***@***.******@***.***>> Sent: Tuesday, November 28, 2017 5:35 PM To: jay0lee/GAM Cc: Ryan Kelley; Comment Subject: Re: [jay0lee/GAM] ERROR: 403: Not Authorized to access this resource/api - forbidden (#461) Do the following: gam oauth info The last line of the output is: G Suite Admin: ***@***.******@***.***> Fill in that user name in this command: gam print admins user ***@***.******@***.***> What roles does ***@***.******@***.***> have? My super user has: _SEED_ADMIN_ROLE, _GROUPS_ADMIN_ROLE, _SERVICE_ADMIN_ROLE What is the scopeType for each role? Ross On Tue, Nov 28, 2017 at 2:21 PM, kc8zpi ***@***.******@***.***>> wrote: > The command is at the bottom of my message. It's this one. > > gam csv e:/export/google brown-pass.csv gam update user ~Email password > ~Password changepassword off >> RESULT-SetPasswords.txt > > > > Sent from my Verizon, Samsung Galaxy smartphone > > > -------- Original message -------- > From: Ross Scroggs ***@***.******@***.***>> > Date: 11/28/17 4:55 PM (GMT-05:00) > To: jay0lee/GAM ***@***.******@***.***>> > Cc: Ryan Kelley ***@***.******@***.***>>, Comment < ***@***.******@***.***> > > > Subject: Re: [jay0lee/GAM] ERROR: 403: Not Authorized to access this > resource/api - forbidden (#461) > > What command are you trying to execute? > > Ross > > On Tue, Nov 28, 2017 at 11:06 AM, kc8zpi ***@***.******@***.***>> wrote: > > > Jay, I'm having the same 403 issue with 4.32. I have run the oauth revoke > > and info domain a couple of times. I'm showing 30 scopes in my oauth info > > and the user I'm having issues with is showing PASS in all areas of check > > service account. > > > > - > > You are receiving this because you commented. > > Reply to this email directly, view it on GitHub > > <#461 (comment)>, or > mute > > the thread > > <https://github.com/notifications/unsubscribe-auth/AIU8LyoTfLp048kuC- > YOlfGTf2KCGLjdks5s7FmfgaJpZM4MuvS6> > > . > > > > > > -- > Ross Scroggs > ***@***.******@***.***> > > - > You are receiving this because you commented. > Reply to this email directly, view it on GitHub<https://github.com/ > GAM-team/GAM#461#issuecomment-347676585>, or mute the thread< > https://github.com/notifications/unsubscribe- auth/AgfqfFJFAWR1_Nsz1g5VwrM- > xn4UxPX3ks5s7IFlgaJpZM4MuvS6>. > > - > You are receiving this because you commented. > Reply to this email directly, view it on GitHub > <#461 (comment)>, or mute > the thread > <https://github.com/notifications/unsubscribe-auth/ AIU8L1Nm6h7zPTEouED76LTvX8NA0rXoks5s7IdlgaJpZM4MuvS6> > . > -- Ross Scroggs ***@***.******@***.***> - You are receiving this because you commented. Reply to this email directly, view it on GitHub<https://github.com/ GAM-team/GAM#461#issuecomment-347687046>, or mute the thread< https://github.com/notifications/unsubscribe-auth/AgfqfMppJ_ hTDvqQ5niGW4Yo05ie4z8qks5s7IqYgaJpZM4MuvS6>. - You are receiving this because you commented. Reply to this email directly, view it on GitHub <#461 (comment)>, or mute the thread <https://github.com/notifications/unsubscribe-auth/AIU8L3abHM1_uQAQR-8wOf3ugS2NqVHsks5s7JrDgaJpZM4MuvS6> .

-- Ross Scroggs ross.scroggs@gmail.com<mailto:ross.scroggs@gmail.com> - You are receiving this because you commented. Reply to this email directly, view it on GitHub<#461 (comment)>, or mute the thread<https://github.com/notifications/unsubscribe-auth/AgfqfKjpdXx95DYyICutG_rTqb-S0cBqks5s7KMwgaJpZM4MuvS6>.

taers232c · 2017-11-29T00:27:54Z

If the two domains are different, how are they related? A Google admin can only administer the primary domain and subdomains. What does gam print domains show? Ross

…

On Tue, Nov 28, 2017 at 4:24 PM, kc8zpi ***@***.***> wrote: No. The G suite admin is my ***@***.*** account and my test user is a new student account. Sorry for the confusion . Sent from my iPad On Nov 28, 2017, at 7:20 PM, Ross Scroggs ***@***.***< ***@***.***>> wrote: From your gam oauth info, does the domain from: G Suite Admin: ***@***.******@***.***> Match the domain of the test user? Ross On Tue, Nov 28, 2017 at 3:44 PM, kc8zpi ***@***.***<mailto: ***@***.***>> wrote: > My admin account just had the _SEED_ADMIN_ROLE?. I added Services Admin, > User Management, Group Admin. I am still getting the ERROR: 403: Not > Authorized to access this resource/api - forbidden? > > > > ________________________________ > From: Ross Scroggs ***@***.***<mailto: ***@***.***>> > Sent: Tuesday, November 28, 2017 5:35 PM > To: jay0lee/GAM > Cc: Ryan Kelley; Comment > > Subject: Re: [jay0lee/GAM] ERROR: 403: Not Authorized to access this > resource/api - forbidden (#461) > > Do the following: gam oauth info > The last line of the output is: G Suite Admin: ***@***.***<mailto: ***@***.***> > Fill in that user name in this command: gam print admins user > ***@***.******@***.***> > What roles does ***@***.******@***.***> have? My super user has: _SEED_ADMIN_ROLE, > _GROUPS_ADMIN_ROLE, _SERVICE_ADMIN_ROLE > What is the scopeType for each role? > > Ross > > > On Tue, Nov 28, 2017 at 2:21 PM, kc8zpi ***@***.***< ***@***.***>> wrote: > > > The command is at the bottom of my message. It's this one. > > > > gam csv e:/export/google brown-pass.csv gam update user ~Email password > > ~Password changepassword off >> RESULT-SetPasswords.txt > > > > > > > > Sent from my Verizon, Samsung Galaxy smartphone > > > > > > -------- Original message -------- > > From: Ross Scroggs ***@***.***<mailto: ***@***.***>> > > Date: 11/28/17 4:55 PM (GMT-05:00) > > To: jay0lee/GAM ***@***.******@***.***> > > > Cc: Ryan Kelley ***@***.******@***.***>>, Comment < > ***@***.******@***.***> > > > > > Subject: Re: [jay0lee/GAM] ERROR: 403: Not Authorized to access this > > resource/api - forbidden (#461) > > > > What command are you trying to execute? > > > > Ross > > > > On Tue, Nov 28, 2017 at 11:06 AM, kc8zpi ***@***.***< ***@***.***>> > wrote: > > > > > Jay, I'm having the same 403 issue with 4.32. I have run the oauth > revoke > > > and info domain a couple of times. I'm showing 30 scopes in my oauth > info > > > and the user I'm having issues with is showing PASS in all areas of > check > > > service account. > > > > > > - > > > You are receiving this because you commented. > > > Reply to this email directly, view it on GitHub > > > <#461 (comment)>, or > > mute > > > the thread > > > <https://github.com/notifications/unsubscribe- auth/AIU8LyoTfLp048kuC- > > YOlfGTf2KCGLjdks5s7FmfgaJpZM4MuvS6> > > > . > > > > > > > > > > > -- > > Ross Scroggs > > ***@***.******@***.***> > > > > - > > You are receiving this because you commented. > > Reply to this email directly, view it on GitHub<https://github.com/ > > GAM-team/GAM#461#issuecomment-347676585>, or mute the thread< > > https://github.com/notifications/unsubscribe- > auth/AgfqfFJFAWR1_Nsz1g5VwrM- > > xn4UxPX3ks5s7IFlgaJpZM4MuvS6>. > > > > - > > You are receiving this because you commented. > > Reply to this email directly, view it on GitHub > > <#461 (comment)>, or > mute > > the thread > > <https://github.com/notifications/unsubscribe-auth/ > AIU8L1Nm6h7zPTEouED76LTvX8NA0rXoks5s7IdlgaJpZM4MuvS6> > > . > > > > > > -- > Ross Scroggs > ***@***.******@***.***> > > - > You are receiving this because you commented. > Reply to this email directly, view it on GitHub<https://github.com/ > GAM-team/GAM#461#issuecomment-347687046>, or mute the thread< > https://github.com/notifications/unsubscribe-auth/AgfqfMppJ_ > hTDvqQ5niGW4Yo05ie4z8qks5s7IqYgaJpZM4MuvS6>. > > - > You are receiving this because you commented. > Reply to this email directly, view it on GitHub > <#461 (comment)>, or mute > the thread > <https://github.com/notifications/unsubscribe-auth/AIU8L3abHM1_uQAQR- 8wOf3ugS2NqVHsks5s7JrDgaJpZM4MuvS6> > . > -- Ross Scroggs ***@***.******@***.***> - You are receiving this because you commented. Reply to this email directly, view it on GitHub<https://github.com/ GAM-team/GAM#461#issuecomment-347709640>, or mute the thread< https://github.com/notifications/unsubscribe-auth/AgfqfKjpdXx95DYyICutG_ rTqb-S0cBqks5s7KMwgaJpZM4MuvS6>. — You are receiving this because you commented. Reply to this email directly, view it on GitHub <#461 (comment)>, or mute the thread <https://github.com/notifications/unsubscribe-auth/AIU8LzeUbrHuOp0RmrQToW9oHBC7MkSSks5s7KQ1gaJpZM4MuvS6> .

-- Ross Scroggs ross.scroggs@gmail.com

kc8zpi · 2017-11-29T00:29:35Z

I only have one Google domain @beldingschools.org On Nov 28, 2017, at 7:28 PM, Ross Scroggs <notifications@github.com<mailto:notifications@github.com>> wrote: If the two domains are different, how are they related? A Google admin can only administer the primary domain and subdomains. What does gam print domains show? Ross

…

On Tue, Nov 28, 2017 at 4:24 PM, kc8zpi ***@***.******@***.***>> wrote: No. The G suite admin is my ***@***.*** account and my test user is a new student account. Sorry for the confusion . Sent from my iPad On Nov 28, 2017, at 7:20 PM, Ross Scroggs ***@***.******@***.***>< ***@***.***>> wrote: From your gam oauth info, does the domain from: G Suite Admin: ***@***.******@***.******@***.***> Match the domain of the test user? Ross On Tue, Nov 28, 2017 at 3:44 PM, kc8zpi ***@***.******@***.***><mailto: ***@***.******@***.***>>> wrote: > My admin account just had the _SEED_ADMIN_ROLE?. I added Services Admin, > User Management, Group Admin. I am still getting the ERROR: 403: Not > Authorized to access this resource/api - forbidden? > > > > ________________________________ > From: Ross Scroggs ***@***.******@***.***><mailto: ***@***.******@***.***>>> > Sent: Tuesday, November 28, 2017 5:35 PM > To: jay0lee/GAM > Cc: Ryan Kelley; Comment > > Subject: Re: [jay0lee/GAM] ERROR: 403: Not Authorized to access this > resource/api - forbidden (#461) > > Do the following: gam oauth info > The last line of the output is: G Suite Admin: ***@***.******@***.***><mailto: ***@***.******@***.***>> > Fill in that user name in this command: gam print admins user > ***@***.******@***.******@***.***> > What roles does ***@***.******@***.******@***.***> have? My super user has: _SEED_ADMIN_ROLE, > _GROUPS_ADMIN_ROLE, _SERVICE_ADMIN_ROLE > What is the scopeType for each role? > > Ross > > > On Tue, Nov 28, 2017 at 2:21 PM, kc8zpi ***@***.******@***.***>< ***@***.***>> wrote: > > > The command is at the bottom of my message. It's this one. > > > > gam csv e:/export/google brown-pass.csv gam update user ~Email password > > ~Password changepassword off >> RESULT-SetPasswords.txt > > > > > > > > Sent from my Verizon, Samsung Galaxy smartphone > > > > > > -------- Original message -------- > > From: Ross Scroggs ***@***.******@***.***><mailto: ***@***.******@***.***>>> > > Date: 11/28/17 4:55 PM (GMT-05:00) > > To: jay0lee/GAM ***@***.******@***.******@***.***> > > > Cc: Ryan Kelley ***@***.******@***.******@***.***>>, Comment < > ***@***.******@***.******@***.***> > > > > > Subject: Re: [jay0lee/GAM] ERROR: 403: Not Authorized to access this > > resource/api - forbidden (#461) > > > > What command are you trying to execute? > > > > Ross > > > > On Tue, Nov 28, 2017 at 11:06 AM, kc8zpi ***@***.******@***.***>< ***@***.***>> > wrote: > > > > > Jay, I'm having the same 403 issue with 4.32. I have run the oauth > revoke > > > and info domain a couple of times. I'm showing 30 scopes in my oauth > info > > > and the user I'm having issues with is showing PASS in all areas of > check > > > service account. > > > > > > - > > > You are receiving this because you commented. > > > Reply to this email directly, view it on GitHub > > > <#461 (comment)>, or > > mute > > > the thread > > > <https://github.com/notifications/unsubscribe- auth/AIU8LyoTfLp048kuC- > > YOlfGTf2KCGLjdks5s7FmfgaJpZM4MuvS6> > > > . > > > > > > > > > > > -- > > Ross Scroggs > > ***@***.******@***.******@***.***> > > > > - > > You are receiving this because you commented. > > Reply to this email directly, view it on GitHub<https://github.com/ > > GAM-team/GAM#461#issuecomment-347676585>, or mute the thread< > > https://github.com/notifications/unsubscribe- > auth/AgfqfFJFAWR1_Nsz1g5VwrM- > > xn4UxPX3ks5s7IFlgaJpZM4MuvS6>. > > > > - > > You are receiving this because you commented. > > Reply to this email directly, view it on GitHub > > <#461 (comment)>, or > mute > > the thread > > <https://github.com/notifications/unsubscribe-auth/ > AIU8L1Nm6h7zPTEouED76LTvX8NA0rXoks5s7IdlgaJpZM4MuvS6> > > . > > > > > > -- > Ross Scroggs > ***@***.******@***.******@***.***> > > - > You are receiving this because you commented. > Reply to this email directly, view it on GitHub<https://github.com/ > GAM-team/GAM#461#issuecomment-347687046>, or mute the thread< > https://github.com/notifications/unsubscribe-auth/AgfqfMppJ_ > hTDvqQ5niGW4Yo05ie4z8qks5s7IqYgaJpZM4MuvS6>. > > - > You are receiving this because you commented. > Reply to this email directly, view it on GitHub > <#461 (comment)>, or mute > the thread > <https://github.com/notifications/unsubscribe-auth/AIU8L3abHM1_uQAQR- 8wOf3ugS2NqVHsks5s7JrDgaJpZM4MuvS6> > . > -- Ross Scroggs ***@***.******@***.******@***.***> - You are receiving this because you commented. Reply to this email directly, view it on GitHub<https://github.com/ GAM-team/GAM#461#issuecomment-347709640>, or mute the thread< https://github.com/notifications/unsubscribe-auth/AgfqfKjpdXx95DYyICutG_ rTqb-S0cBqks5s7KMwgaJpZM4MuvS6>. - You are receiving this because you commented. Reply to this email directly, view it on GitHub <#461 (comment)>, or mute the thread <https://github.com/notifications/unsubscribe-auth/AIU8LzeUbrHuOp0RmrQToW9oHBC7MkSSks5s7KQ1gaJpZM4MuvS6> .

-- Ross Scroggs ross.scroggs@gmail.com<mailto:ross.scroggs@gmail.com> - You are receiving this because you commented. Reply to this email directly, view it on GitHub<#461 (comment)>, or mute the thread<https://github.com/notifications/unsubscribe-auth/AgfqfGwNk9VEhCBteDpk1ivJDYKCWeBVks5s7KUVgaJpZM4MuvS6>.

kc8zpi · 2017-11-29T01:47:25Z

Thanks for the help Ross.

bffive · 2018-10-12T23:34:18Z

So I am getting the same error message when trying to run the "gam print guardians group" command. I reauthed, a couple times now, and no dice.
gam print admins user yields:
roleAssignmentId,roleId,role,assignedTo,assignedToUser,scopeType,orgUnitId,orgUnit
7575636725989494,7575636725989377,_SEED_ADMIN_ROLE,117726589875268706402,lhric.partenope@domainhere.org,CUSTOMER,,

taers232c · 2018-10-12T23:52:40Z

Contact me privately. Ross

…

On Fri, Oct 12, 2018 at 4:34 PM bffive ***@***.***> wrote: So I am getting the same error message when trying to run the "gam print guardians group" command. I reauthed, a couple times now, and no dice. gam print admins user yields: roleAssignmentId,roleId,role,assignedTo,assignedToUser,scopeType,orgUnitId,orgUnit 7575636725989494,7575636725989377,_SEED_ADMIN_ROLE,117726589875268706402, ***@***.***,CUSTOMER,, — You are receiving this because you commented. Reply to this email directly, view it on GitHub <#461 (comment)>, or mute the thread <https://github.com/notifications/unsubscribe-auth/AIU8L-B2TDwH6sbi_OwiKpi6hhv2u6K8ks5ukScDgaJpZM4MuvS6> .

-- Ross Scroggs ross.scroggs@gmail.com

jhavens12 closed this as completed Apr 3, 2017

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

ERROR: 403: Not Authorized to access this resource/api - forbidden #461

ERROR: 403: Not Authorized to access this resource/api - forbidden #461

jhavens12 commented Mar 30, 2017

Katun79 commented Mar 30, 2017

jhavens12 commented Mar 31, 2017

taers232c commented Mar 31, 2017 via email

jhavens12 commented Mar 31, 2017

jay0lee commented Mar 31, 2017 via email

jhavens12 commented Apr 3, 2017

kborecky commented May 10, 2017

kc8zpi commented Nov 28, 2017 •

edited

Loading

taers232c commented Nov 28, 2017 via email

kc8zpi commented Nov 28, 2017 via email

taers232c commented Nov 28, 2017 via email

kc8zpi commented Nov 28, 2017 via email

taers232c commented Nov 29, 2017 via email

kc8zpi commented Nov 29, 2017 via email

taers232c commented Nov 29, 2017 via email

kc8zpi commented Nov 29, 2017 via email

kc8zpi commented Nov 29, 2017

bffive commented Oct 12, 2018

taers232c commented Oct 12, 2018 via email

ERROR: 403: Not Authorized to access this resource/api - forbidden #461

ERROR: 403: Not Authorized to access this resource/api - forbidden #461

Comments

jhavens12 commented Mar 30, 2017

Katun79 commented Mar 30, 2017

jhavens12 commented Mar 31, 2017

taers232c commented Mar 31, 2017 via email

jhavens12 commented Mar 31, 2017

jay0lee commented Mar 31, 2017 via email

jhavens12 commented Apr 3, 2017

kborecky commented May 10, 2017

kc8zpi commented Nov 28, 2017 • edited Loading

taers232c commented Nov 28, 2017 via email

kc8zpi commented Nov 28, 2017 via email

taers232c commented Nov 28, 2017 via email

kc8zpi commented Nov 28, 2017 via email

taers232c commented Nov 29, 2017 via email

kc8zpi commented Nov 29, 2017 via email

taers232c commented Nov 29, 2017 via email

kc8zpi commented Nov 29, 2017 via email

kc8zpi commented Nov 29, 2017

bffive commented Oct 12, 2018

taers232c commented Oct 12, 2018 via email

kc8zpi commented Nov 28, 2017 •

edited

Loading