Can't access reports of two child accounts

[Yao Liu]

We currently have 5 accounts under this MCC 879-989-3196

I am able to use my service account token to access reports of all the child accounts under this MCC except for Account 743-137-2750 and 462-748-6131. According to Google compliance, I should have the same permission across this MCC, but the error code says "User doesn\'t have permission to access customer. Note: If you\'re accessing a client customer, the manager\'s customer id must be set in the \'login-customer-id\' header." 

[Google Ads API Forum Advisor Prod]

Hi Yao,

Thank you for posting your concern.

Could you confirm if the specific error that you encountered is USER_PERMISSION_DENIED? If yes, then did you try to follow the suggestion specified in the error message or prevention tip discussed on the document I provided? You should specify the customer ID 879-989-3196 in login-customer-id (without hyphen) which the authenticated user has access.

If the error persists after trying the suggestion, then please provide the following details via Reply privately to author option:

• Complete request and response logs with request ID generated on your end
• login user account used to generated Oauth2 credential and has access to the MCC account

Regards,

Ernie John Blanca Tacata Google Ads API Team

ref:_00D1U1174p._5004Q2EqPyA:ref

[Yao Liu]

Hi Ernie,

When I specify the login-customer-id to be 879-989-3196 (the parent account), I got error message: "Metrics cannot be requested for a manager account. To retrieve metrics, issue separate requests against each client account under the manager account." 

I was able to use the code to access report for 986-721-2697, another child account under 879-989-3196. But the same code just does not work for 743-137-2750 and 462-748-6131, with error message: "User doesn\'t have permission to access customer. Note: If you\'re accessing a client customer, the manager\'s customer id must be set in the \'login-customer-id\' header. See https://developers.google.com/google-ads/api/docs/concepts/call-structure#cid"

Best,

Yao

[Google Ads API Forum Advisor Prod]

Hi Yao,

Based on the part of reply below, it appears that the USER_PERMISSION_DENIED error has been addressed when you specified the customer ID 879-989-3196 in the login-customer-id. However, there is a remaining issue that is shown in the API response after the USER_PERMISSION_DENIED has been fixed.

"When I specify the login-customer-id to be 879-989-3196 (the parent account), I got error message: "Metrics cannot be requested for a manager account. To retrieve metrics, issue separate requests against each client account under the manager account." 

With this, please ensure that you are using the customer ID of a client account in the customer_id field of API request. However, should the issue persist and so that I can have a closer look, we will be needing the following details and you can provide it via Reply privately to author option::

• Updated request and response logs with request ID generated on your end

• login user account used to generated Oauth2 credential and has access to the MCC account

[Yao Liu]

Hi Ernie,

Can you help confirm if 743-137-2750 and 462-748-6131 are considered customer IDs of client accounts? I thought they are, and so is 986-721-2697. Also, they are all under manager account 879-989-3196

If that is the case, I am wondering why permission is denied for 743-137-2750 but not 986-721-2697.

Thanks,

Yao

--
--
=~=~=~=~=~=~=~=~=~=~=~=~=~=~=~=~=~=~=~=~=~=~=~=~
Also find us on our blog:
https://googleadsdeveloper.blogspot.com/
=~=~=~=~=~=~=~=~=~=~=~=~=~=~=~=~=~=~=~=~=~=~=~=~
 
You received this message because you are subscribed to the Google
Groups "AdWords API and Google Ads API Forum" group.
To post to this group, send email to adwor...@googlegroups.com
To unsubscribe from this group, send email to
adwords-api...@googlegroups.com
For more options, visit this group at
http://groups.google.com/group/adwords-api?hl=en
---
You received this message because you are subscribed to a topic in the Google Groups "AdWords API and Google Ads API Forum" group.
To unsubscribe from this topic, visit https://groups.google.com/d/topic/adwords-api/8i3yT4gc7w8/unsubscribe.
To unsubscribe from this group and all its topics, send an email to adwords-api...@googlegroups.com.
To view this discussion on the web visit https://groups.google.com/d/msgid/adwords-api/VxJzL000000000000000000000000000000000000000000000QR6MHR00UbxJjWqxTbmt9tjsTV0ItQ%40sfdc.net.