Error 403 when using contactdelegate command

[Cody Eckert]

Hello all! 

I am trying to delegate a user to be able to access another accounts contacts and am getting the following error when running the command: 

ERROR: 403: Request had insufficient authentication scopes. - 403

I know this has to do with how my oauth2 file is configured but I am unsure what auth scope I need to add to it in order to be able to run this command. 

Can anyone help?

Thanks!

[Cody Eckert]

>  I know this has to do with how my oauth2 file is configured but I am unsure what auth scope I need to add to it in order to be able to run this command. 

At least, this is what I believe to be the case. 

[Ross Scroggs]

Cody,

Do:

gam oauth delete

gam oauth create

The particular scope yiu're looking for is:

[*]  7) Contact Delegation (supports readonly)

Ross

--

ross.s...@gmail.com

--
You received this message because you are subscribed to the Google Groups "GAM for Google Workspace" group.
To unsubscribe from this group and stop receiving emails from it, send an email to google-apps-man...@googlegroups.com.
To view this discussion on the web visit https://groups.google.com/d/msgid/google-apps-manager/49cfe52e-fe5e-414d-904b-cf70cab94144n%40googlegroups.com.

[Rance Hall]

Cody:

 

If you are using Advanced GAM you can verify this assumption by updating the project GAM is using to make sure the correct APIs are accessible, and update your gam to use them.

 

From the Advanced GAM Wiki:

 

gam update project

gam oauth update

 

IF you are using standard GAM, I’m sure there is a similar process you should use.

 

This may not fix your issue, but you will at least know its not a permissions thing.

 

Rance

 

-- 

 

Rance Hall

Application Specialist

ESU 10

rance...@esu10.org

308-698-1919

 

 

Some days are better, some days are worse.

Look for the blessing instead of the curse.

 

 

 

 

 

 

From: google-ap...@googlegroups.com <google-ap...@googlegroups.com> on behalf of Cody Eckert <ceck...@ashland.edu>
Date: Thursday, May 5, 2022 at 2:49 PM
To: GAM for Google Workspace <google-ap...@googlegroups.com>
Subject: [GAM] Re: Error 403 when using contactdelegate command

[EXTERNAL EMAIL]

--

You received this message because you are subscribed to the Google Groups "GAM for Google Workspace" group.
To unsubscribe from this group and stop receiving emails from it, send an email to google-apps-man...@googlegroups.com.

To view this discussion on the web visit https://groups.google.com/d/msgid/google-apps-manager/c106671f-a886-4a45-967a-db2f8b54c9e6n%40googlegroups.com.

[Cody Eckert]

We are using original GAM, not Advanced GAM. 

[Cody Eckert]

This worked, thank you. 

I did force me to create a new API project but after that I was able to delegate access to contacts. 

However, I don't believe this will work for me. This doesn't seem to allow me to create new contacts or contact groups for the delegated account which is what my user wants. 

I appreciate the help though!

[Ross Scroggs]

Cody,

You need Advanced GAM to manage contacts.

See: https://github.com/taers232c/GAMADV-XTD3/wiki/How-to-Upgrade-from-Standard-GAM

Ross

--

ross.s...@gmail.com

To view this discussion on the web visit https://groups.google.com/d/msgid/google-apps-manager/bf765ad7-7418-4b33-af57-37eaa63b83ffn%40googlegroups.com.

[Cody Eckert]

Ross,

I think there may be a miscommunication as to what we are looking to accomplish. In any case, I have a bigger problem now. 

I am now receiving the following error when running commands: "ERROR: User fakeaddress...@ashland.edu: unauthorized_client: Client is unauthorized to retrieve access tokens using this method, or client not authorized for any of the scopes requested."

For example I tried to run the command "gam user fakeaddress...@ashland.edu delegate to anotherfa...@ashland.edu" and received the above error. Same for  "gam user fakeaddress...@ashland.edu show delegates". 

[Jay Lee]

Can you offer more detail on what you are trying to accomplish then? Your last message switched to describing a mailbox delegation command without offering any context of what you actually want to delegate and do.

Jay Lee

To view this discussion on the web visit https://groups.google.com/d/msgid/google-apps-manager/dcaf3904-e702-4da4-8076-b3d8cea94012n%40googlegroups.com.