Not able to access API using production Account developer token?

[na...@zirca.in]

Hi,

I have created one production manager account and one test manager account .Under test manager account ,i have created one  Client Test account .

I also linked my Test manager account  with Production manager .I am having developer token in unapproved state so, I have created Test client account and using Client customer ID of test account and Developer token of production account  to access AdWords API's.

While requesting ,  I have tried following scenarios : 

1. OAuth Credentials of Production Manager account ,and access token and developer token along with Client Customer Id of Test Account .

2. OAuth Credentials of Test Manager account along with its access token and Production accounts developer token.

This is running into error  "User Access Denied" .Please help on this.Thanks in advance.

[Sreelakshmi Sasidharan (AdWords API Team)]

Hi, 

Are you getting USER_PERMISSION_DENIED error? If so, it means that there is no link between the manager account authenticated in the request and the client account specified in the headers. The points listed below should  be helpful for you:

1. The test and production accounts cannot interact in any way, you may not use a test account under your existing production manager account. The test manager hierarchy and production manager hierarchy can be maintained separately. Please check here for more details. 
2. A developer token can be used to target any AdWords account. If the developer token is having test access, you will not be able to make calls against test accounts. If the developer token is approved, you will be able to make calls against the product accounts as well. To use a developer token while making calls against an account, it is not required for that account to be linked with the MCC owning the token.
3. Assuming that the production accounts and test accounts are in two different hierarchies,
   3.1) To make calls against the Production MCC or any of the production client accounts in that hierarchy, you can use the client credentials (client Id, client secret) and OAuth tokens (access token, refresh token) owned by an
   admin user on the production MCC account. It is important to make sure that the authorization code was generated (after accepting the prompt manually) by the user having access to the production MCC account. 
   3.2) To make calls against the Test MCC or any of the test client accounts in that hierarchy, you can use the client credentials (client Id, client secret) and OAuth tokens (access token, refresh token) owned by an admin user on the test MCC account. It is important to make sure that the authorization code was generated (after accepting the prompt manually) by the user having access to the test MCC account. 

Please check the guide to setup the OAuth for more details. Please give this a try and let me know if you are still facing issues. If yes, could you write back with the SOAP logs, the client customer Id of the target account and the email Id authenticating the API call? 

Thanks,
Sreelakshmi, AdWords API Team