GAM Denied Error

[Angela Bawcum]

Recently, we are getting the following errors appear whenever we try to run any command in our instance of GAMADV:

ERROR: Authentication Token Error - access_denied: Account restricted
ERROR: API access Denied

The only change I can think of that could have impacted this was we have been recently  changing services to off at the root and override on for specific OUs.

I thought that GAM only required:

Apps > Additional Google services: Google Cloud Platform under
Apps > Google Workspace: Drive and Docs (if you want to save output todrive)
Apps > Google Workspace: Gmail (if you want email notifications from GAM)

Am I missing a service or is there another reason I may be suddenly receiving this error?

Searching the past emails from the group, I found the same error from someone on Sep 27, 2021 with the subject "Authentication token error". The solution suggested that GAM user was not configured for over 18 years. While we have never set any of these for any OUs (ie: currently no value is set for any OU), I went ahead and set it to over 18 for the OU our GAM account is in but still receive the same error.

Thanks,

Angela

[Angela Bawcum]

Thanks to Ross for jumping on and helping troubleshoot this!

In case anyone else comes across this in the future, the fix was to enable "Access to additional services without individual control" under Additional Google services for the OU that the GAM project is run from.

Angela Bawcum

Interim Director of Technology and Information Security

IT Services

Lawrence Technological University

21000 W. Ten Mile Rd

Southfield, MI 48075

248.204.3700

--
You received this message because you are subscribed to the Google Groups "GAM for Google Workspace" group.
To unsubscribe from this group and stop receiving emails from it, send an email to google-apps-man...@googlegroups.com.
To view this discussion on the web visit https://groups.google.com/d/msgid/google-apps-manager/7e177a14-4e44-4f8b-9a94-e1b1ac73c73cn%40googlegroups.com.

[Steve Zinski]

You are my hero... Spent all day trying to figure this one out (this is my initial install of GAM 6.x -- upgrading from GAM 4.x) and could not get past an Authorization Error message. I enabled "Access to additional services without individual control" for my Super Admins OU and everything is working now. THANK YOU!