Adwords API Error: [OperationAccessDenied.ACTION_NOT_PERMITTED @ class com.google.ads.api.serviceimpls.campaignmgmt.adgroup.MutateAction]

[ram...@wirehub.co.id]

Hi,

Its OK when I get list of adgroup.

I got error when I tried to create or update adgroup.

Thanks,

Below is my request. I use ruby.

W, [2017-12-28T22:03:47.018791 #24821]  WARN -- : ID: 3169325051, URL: https://adwords.google.com/api/adwords/cm/v201708/AdGroupService, Service: AdGroupService, Action: mutate, Response time: 120ms, Request ID: 00056167d2a045b00a621611a508b40c, Operations: 1, Is fault: true, Fault message: [OperationAccessDenied.ACTION_NOT_PERMITTED @ class com.google.ads.api.serviceimpls.campaignmgmt.adgroup.MutateAction]

I, [2017-12-28T22:03:47.018884 #24821]  INFO -- : Outgoing request: SOAPAction: "mutate", User-Agent: BiddingDoctor (AwApi-Ruby/0.25.1, Common-Ruby/0.14.1, GoogleAdsSavon/1.0.2, ruby/2.3.1, HTTPI/2.4.2, httpclient), Authorization: REDACTED, Content-Type: text/xml;charset=UTF-8, Content-Length: 1023 <?xml version="1.0" encoding="UTF-8"?><env:Envelope xmlns:xsd="http://www.w3.org/2001/XMLSchema" xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:wsdl="https://adwords.google.com/api/adwords/cm/v201708" xmlns:env="http://schemas.xmlsoap.org/soap/envelope/"><env:Header><wsdl:RequestHeader xmlns="https://adwords.google.com/api/adwords/cm/v201708"><userAgent>BiddingDoctor (AwApi-Ruby/0.25.1, Common-Ruby/0.14.1, GoogleAdsSavon/1.0.2, ruby/2.3.1, HTTPI/2.4.2, httpclient)</userAgent><developerToken>REDACTED</developerToken><clientCustomerId>3169325051</clientCustomerId></wsdl:RequestHeader></env:Header><env:Body><mutate xmlns="https://adwords.google.com/api/adwords/cm/v201708"><operations><operator>ADD</operator><operand><campaignId>945892219</campaignId><name>Test 2</name><status>ENABLED</status><biddingStrategyConfiguration><bids xsi:type="CpcBid"><bid><microAmount>10000000</microAmount></bid></bids></biddingStrategyConfiguration></operand></operations></mutate></env:Body></env:Envelope>

I, [2017-12-28T22:03:47.018960 #24821]  INFO -- : Incoming response: Content-Type: text/xml; charset=UTF-8, Date: Thu, 28 Dec 2017 15:03:46 GMT, Expires: Thu, 28 Dec 2017 15:03:46 GMT, Cache-Control: private, max-age=0, X-Content-Type-Options: nosniff, X-Frame-Options: SAMEORIGIN, X-XSS-Protection: 1; mode=block, Server: GSE, Alt-Svc: hq=":443"; ma=2592000; quic=51303431; quic=51303339; quic=51303338; quic=51303337; quic=51303335,quic=":443"; ma=2592000; v="41,39,38,37,35", Accept-Ranges: none, Vary: Accept-Encoding, Transfer-Encoding: chunked <soap:Envelope xmlns:soap="http://schemas.xmlsoap.org/soap/envelope/"><soap:Header><ResponseHeader xmlns="https://adwords.google.com/api/adwords/cm/v201708"><requestId>00056167d2a045b00a621611a508b40c</requestId><serviceName>AdGroupService</serviceName><methodName>mutate</methodName><operations>1</operations><responseTime>120</responseTime></ResponseHeader></soap:Header><soap:Body><soap:Fault><faultcode>soap:Client</faultcode><faultstring>[OperationAccessDenied.ACTION_NOT_PERMITTED @ class com.google.ads.api.serviceimpls.campaignmgmt.adgroup.MutateAction]</faultstring><detail><ApiExceptionFault xmlns="https://adwords.google.com/api/adwords/cm/v201708"><message>[OperationAccessDenied.ACTION_NOT_PERMITTED @ class com.google.ads.api.serviceimpls.campaignmgmt.adgroup.MutateAction]</message><ApplicationException.Type>ApiException</ApplicationException.Type><errors xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xsi:type="OperationAccessDenied"><fieldPath></fieldPath><trigger></trigger><errorString>OperationAccessDenied.ACTION_NOT_PERMITTED</errorString><ApiError.Type>OperationAccessDenied</ApiError.Type><reason>ACTION_NOT_PERMITTED</reason></errors></ApiExceptionFault></detail></soap:Fault></soap:Body></soap:Envelope>

[Bharani Cherukuri (AdWords API Team)]

Hello, 

Based on the logs, OperationAccessDenied.ACTION_NOT_PERMITTED error is encountered when you don't have an authorization to invoke the mutate method. It is possible that you're using the credentials with read-only access to create ad groups. You will need to have either a standard or administrative access level to make changes to your account. 

If you continue to have an issue with this, could you provide us the email address associated to the refresh token via Reply privately to author option, so we can take a look.

Regards,

Bharani, AdWords API Team.

[ram...@wirehub.co.id]

Hi Bharani,

Thanks for your help. This issue has been resolved.

The mcc connect to several emails. Authorization token updated by email that have read-only access. To solve this, I reconnect with email that has administrative access.


Thanks,