Need Help! Error: Access Denied - Client Name not authorized for API Scopes

845 views
Skip to first unread message

CHP

unread,
Oct 22, 2015, 5:36:32 PM10/22/15
to Google Apps Manager
Hi, I am using GAM 3.61 and I am trying to have a calendar (that's only shared with everyone in the domain) to show up automatically for users in their Calendar page. 

I used this in the command prompt: gam all users add calendar calendaradd...@group.calendar.google.com selected true

Then, I get an error message about adding the client name in Security settings (Advanced settings > Manage third party Oauth Client Access). 

But it only has options: Manage OAuth domain key and Manage API client access. In Manage OAuth, I cannot add or change the client ID, but in Manage API client access, I added the client name and the APIs, but I still get the denied error.

Can anyone help with this? I have attached screenshots as well. Also, .json files were created on a different account, but the tutorial said, it didn't need to be on the same Google Apps domain.

I also have another question: What is the difference between selected and hidden? I just want the calendar to be displayed in users' calendar pages.

Thank you.
denied.png
advancedsettings.png
manageoauth.png
apiclientaccess.png

Rishan

unread,
Oct 28, 2015, 5:52:45 PM10/28/15
to Google Apps Manager
Go to:
1. Security --> Advanced Settings --> Manage API Client access
2.a. In the Client Name box, add the client ID of the service account that it is showing in the error (something like NNNNNNNNNNNN-xxxxxxNNNxNxxxxNxNxxNxxxxxNNxxxN.apps.googleusercontent.com)
2.b. In the  One or More API Scopes box add Calendar API URL (https://apps-apis.google.com/a/feeds/calendar/resource/).
3. Click Authorize.

At 2.b, you should add other API URLs, as you need, separated by commas.

Good Luck
----

Ross Scroggs

unread,
Oct 28, 2015, 7:32:49 PM10/28/15
to google-ap...@googlegroups.com
I believe that the scopes you want for the service account client in Rishan's step 2.b are the following:
is used by the OAuth2 Client, not the service account client.

Ross

--
You received this message because you are subscribed to the Google Groups "Google Apps Manager" group.
To unsubscribe from this group and stop receiving emails from it, send an email to google-apps-man...@googlegroups.com.
To post to this group, send email to google-ap...@googlegroups.com.
Visit this group at http://groups.google.com/group/google-apps-manager.
To view this discussion on the web visit https://groups.google.com/d/msgid/google-apps-manager/297fa074-f6ad-4a75-b9c4-c8ae911a6e55%40googlegroups.com.

For more options, visit https://groups.google.com/d/optout.



--
Reply all
Reply to author
Forward
0 new messages