Delegation denied error for Google Apps Script

[Paul Heft]

I am designing a Google Apps Script for domain-wide delegation, so that it can read details from Gmail in our Google Workspace domain's user accounts. The script runs fine when it accesses my own Gmail, but fails with a "Delegation denied" error when accessing another user's account.

GoogleJsonResponseException: API call to gmail.users.labels.list failed with error: Delegation denied for ad...@domain.org

Have I left out something?

Please refer to my detailed document.

Thanks!

[Andrew Roberts]

Have you enabled domain wide delegation in the admin panel?

--
You received this message because you are subscribed to the Google Groups "Google Apps Script Community" group.
To unsubscribe from this group and stop receiving emails from it, send an email to google-apps-script-c...@googlegroups.com.
To view this discussion on the web visit https://groups.google.com/d/msgid/google-apps-script-community/cfb1eaae-6cb2-4b65-b44d-1b7e2755a1f1n%40googlegroups.com.

[Paul Heft]

Thanks, yes, I have "enabled domain wide delegation in the admin panel"; I followed the directions at Control API access with domain-wide delegation. The result was that the Client ID for my GCP project is listed with the authorized scopes (I'm sure this is too many!):

• https://www.googleapis.com/auth/script.external_request
• https://www.googleapis.com/auth/gmail.labels
• https://www.googleapis.com/auth/gmail.settings.basic
• https://www.googleapis.com/auth/gmail.settings.sharing
• https://www.googleapis.com/auth/gmail.metadata
• https://www.googleapis.com/auth/gmail.modify
• https://www.googleapis.com/auth/gmail.readonly
• https://mail.google.com/

[Pelagia Drakopoulou]

I have come across the exact same problem. Is there a chance that you have fixed it?