RE: api error - 403 user_permission_denied on createcustomerclient with test account

[Google Ads API Forum Advisor]

Hi,

Thank you for reaching out to the Google Ads API support team.

As per provided information, I understand that you are encountering a USER_PERMISSION_DENIED error when trying to create a test account via the API. Please note that the email Id that you're using to generate OAuth credentials is added to your Google Ads account with 'Admin' or 'Standard' access to perform mutate operations. Additionally, please verify that you have the correct access level for the Google Ads account you are trying to access. I would recommend you to refer to this documentation for more detailed information. If you are still facing any issues, then in order to investigate the issue further, please provide the below information.

• Execute List Accessible Customers and provide us complete API request and response logs, you may also check this API documentation for more information.
• Provide the email address that is used for generating the OAuth credentials.

You can send the details via Reply privately to the author option, or direct private reply to this email.

Thanks,
 

Google Ads API Team

Feedback
How was our support today?

               
[2025-07-23 17:19:43Z GMT] This message is in relation to case "ref:!00D1U01174p.!500Ht01swVzh:ref" (ADR-00319919)

[Google Ads API Forum Advisor]

Hi,

I have checked your Google Ads account (579-527-1397), I could see the email ‘mcc1_s...@gmail.com’ is not added under the ‘Access and security’ settings. I would recommend you to add this email address here: Google Ads account > Admin > Access and Security > Users > The authenticated email ID with 'Standard' or 'Admin' access level.

Thanks,
 

Google Ads API Team

Feedback
How was our support today?

               

[2025-07-28 16:05:05Z GMT] This message is in relation to case "ref:!00D1U01174p.!500Ht01swVzh:ref" (ADR-00319919)

[Felipe Domingues]

Hello! Thanks for the fast answer.

This MCC (579-527-1397) is a test MCC from my another mail, domfe...@gmail.com. I've created it to test the 'createCustomerClient' command. My MCC production with Basic Access (the access rose in the last weekend) is MCC (852-869-1047) for the mail mcc1.s...@gmail.com, as you can see on the image attached.



Even with the basic access the issue keeps occurring. Any suggestions?

Best Regards!

--

--

At.te.

Felipe Domingues
M.Sc. Media & Technology
Phone: (14) 99715-5053

[Felipe Domingues]

Hello,

Thank you for your response, and i'm so sorry about the delay to return. As requested, here is the information to help investigate the USER_PERMISSION_DENIED issue.

1. OAuth2 Email Address:
The email address used to generate the OAuth credentials is: mcc1_s...@gmail.com

I can confirm that this user is listed as an 'Admin' in the 'Access and security' panel of my Production MCC (852-869-1047).

2. `ListAccessibleCustomers` API Logs:

--- START REQUEST LOG ---

[
{
"access_token": 
"ya29.a0AS3H6NwhesA7gucGRjMCtpgYeI72JdMM9520wpWwNIBmXscIloPI_42K3nkGN5Ln9dYQsd4SFlhiHpOoUN6FhmK85XQBMqK0t3KKjQ0-BD_yMKl_QWAgsWiLhWwK_dzxnpztAogMusKN6lQ7ocW40P1_FsacQHJ1CCqJgoKzIAaCgYKAX8SARASFQHGX2MifcrBNS_dEc38MOG56th5eg0177",
"expires_in": 
3599,
"scope": 
"https://www.googleapis.com/auth/adwords",
"token_type": 
"Bearer",
"refresh_token_expires_in": 
12074
}
]
 
--- END REQUEST LOG ---

--- START RESPONSE LOG ---

[
{
"resourceNames": 
[
"customers/2316460147",
"customers/8528691047"
]
}
]
 
--- END RESPONSE LOG ---


Thank you for your assistance in investigating this. I look forward to your findings.

Best regards,

[Google Ads API Forum Advisor]

Hi,

The user_permission_denied error you are seeing is not because of the access level of the developer token i.e, Basic access. Kindly note that the OAuth credentials generated email who have 'Admin' or 'Standard access' can only perform the Mutate operations. To avoid the error, make sure the email 'mcc1_s...@gmail.com' must be added as a user with the above access level in the test account '579-527-1397' which you have used to make an API request. 

You can follow the How to Grant Access help center to know the steps to provide access to the emails as a user in your account.

Thanks,
 

Google Ads API Team

Feedback
How was our support today?

               

[2025-07-28 20:13:42Z GMT] This message is in relation to case "ref:!00D1U01174p.!500Ht01swVzh:ref" (ADR-00319919)