Hi,
Thank you for reaching out to Google Ads API Forum.
I can see that you have encountered the USER_PERMISSION_DENIED error. This error usually indicates that the user / email address you used to generate your OAuth2 credentials does not have access to the customer ID you specified in your request.
That being said, you will need to ensure that the user / email address you used to generate the credentials indeed has access to the account in your request. If the user / email address has access or is associated with the MCC / manager account, you will need to specify the MCC / manager account's ID without hyphens (-) as the value of the login-customer-id field.
Also, you may check the MCC ID that used as "login-customer-id" in your request on Ads UI, and your email address used to generate OAuth credentials is listed under the Users or Users In Manager Accounts tabs in the Access and Security page, which lists all users that have permission to make changes to the Ads account and its children.
Let me know how it goes on your end if this resolves your issue. In the event that the error persists after trying the suggested solution, then you may provide to us the updated complete request and response logs with the request-id generated along with the email address used to generate the OAuth credentials from your end so we can investigate further.
You can provide it via the Reply privately to author option. If this option is not available, then send it instead on this email address googleadsa...@google.com. For the client library, logging can be enabled by navigating to the Client libraries > Your client library (ex. .NET) > Logging documentation, which you can access from this link.
Regards,
![]() |
Google Ads API Team |