Google Ads API Access to account directly, without MCC and login-customer-id

[Ершов Александр]

Hello!

I have a working access to account in the old Adwords API
- customerId

- developerToken
- clientId (from my email which has Standard Access and can access via Google Ads UI)
- clientSecret

This account isn't connected to my MCC, I have only Standard access to it.

But when I try to connect via Ads API, I get an error

    "message": "The caller does not have permission",

    "code": 7,

    "status": "PERMISSION_DENIED",

I tried the following options

- empty

- my MCC (though it's connected)

So I want to know, is it required field, so I need to access like this
(App) => (MyMCC) => (Account)

and not like this
(App) => (Account)

We are preparing to migrate to from Adwords API,
so if this additional field is required and there is no way of working the old way,
 please let me know

[Ершов Александр]

It works under old Adwords API, so that's a bit weird to me
It means that to have access to account which wasn't created by me (was created by another MCC), I either need
- get OAuth credentials from original MCC 
- connect this account not directly to my email, but to my MCC email account, and use my own Oauth credentials

Am I getting this right?

[Ершов Александр]

And if so, will the following work

- Another MCC gives access to account to my MCC
- I create OAuth credentials
- connect using loginCustomerID = my MCC id
- specify this account via 

adsServiceClient->searchStream(customerId, $query);
- work with it

[Google Ads API Forum Advisor Prod]

Hi,

Thank you for raising your concern.

To summarize the authentication on Google Ads API, if the OAuth2 credentials you are using were created by a user which is a user of your MCC/manager account, then you would need to include the MCC's customer ID as the login-customer-id in your properties file. Please refer to this document to read more information about login-customer-id.

Also, the process that you've mentioned in your latest reply appears to be the proper way of authenticating in Google Ads API.

Regards,

Ernie John Blanca Tacata Google Ads API Team

ref:_00D1U1174p._5004Q28oovG:ref

[Ершов Александр]

Hello, Ernie!

Got it, thank you

It worked. Appreciate your help!