GoogleDriveManagement Token Error - unauthorized_client: Client is unauthorized to retrieve...

6,988 views
Skip to first unread message

Joe Tierney

unread,
Feb 3, 2017, 4:50:45 PM2/3/17
to GAM for G Suite
GAM hums like a well oiled machine. It's a beautiful gift. I use it constantly. One scope I've never gotten to work is any command related to GoogleDriveManagement

GAM generates the error: Authentication Token Error - unauthorized_client: Client is unauthorized to retrieve access tokens using this method or unauthorized_client: Unauthorized client or scope in request.

So

gam user jsm...@contoso.com show filelist todrive 

= error.

I've never had any issue running any other GAM commands related to Users, Groups, OUs, Domains, etc. Any feedback or suggestions welcome. 

Ross Scroggs

unread,
Feb 3, 2017, 4:55:39 PM2/3/17
to google-ap...@googlegroups.com
Joe,

Do: gam user jsm...@contoso.com check serviceaccount

What do you get?

Ross

--
You received this message because you are subscribed to the Google Groups "GAM for G Suite" group.
To unsubscribe from this group and stop receiving emails from it, send an email to google-apps-manager+unsub...@googlegroups.com.
To post to this group, send email to google-apps-manager@googlegroups.com.
Visit this group at https://groups.google.com/group/google-apps-manager.
To view this discussion on the web visit https://groups.google.com/d/msgid/google-apps-manager/779d8871-365a-44c2-8039-f1c522d7cec6%40googlegroups.com.
For more options, visit https://groups.google.com/d/optout.



--

Joe Tierney

unread,
Feb 3, 2017, 5:34:29 PM2/3/17
to GAM for G Suite
"FAIL"  across the board. I've added the client name and scopes ... gave it ~30 minutes. Still fails. Not sure if it depends on the type of domain, this is EDU. I can test on some others. 


On Friday, February 3, 2017 at 3:55:39 PM UTC-6, Ross Scroggs wrote:
Joe,

Do: gam user jsm...@contoso.com check serviceaccount

What do you get?

Ross
On Fri, Feb 3, 2017 at 1:50 PM, Joe Tierney <joe.t...@umzuzu.com> wrote:
GAM hums like a well oiled machine. It's a beautiful gift. I use it constantly. One scope I've never gotten to work is any command related to GoogleDriveManagement

GAM generates the error: Authentication Token Error - unauthorized_client: Client is unauthorized to retrieve access tokens using this method or unauthorized_client: Unauthorized client or scope in request.

So

gam user jsm...@contoso.com show filelist todrive 

= error.

I've never had any issue running any other GAM commands related to Users, Groups, OUs, Domains, etc. Any feedback or suggestions welcome. 

--
You received this message because you are subscribed to the Google Groups "GAM for G Suite" group.
To unsubscribe from this group and stop receiving emails from it, send an email to google-apps-manager+unsub...@googlegroups.com.
To post to this group, send email to google-ap...@googlegroups.com.



--

Ross Scroggs

unread,
Feb 3, 2017, 5:37:44 PM2/3/17
to google-ap...@googlegroups.com
Joe,

Sometimes the enabling takes place almost immediately, I've had some users report an hour, patience is a virtue.

Ross

On Fri, Feb 3, 2017 at 2:34 PM, Joe Tierney <joe.t...@umzuzu.com> wrote:
"FAIL"  across the board. I've added the client name and scopes ... gave it ~30 minutes. Still fails. Not sure if it depends on the type of domain, this is EDU. I can test on some others. 

On Friday, February 3, 2017 at 3:55:39 PM UTC-6, Ross Scroggs wrote:
Joe,

Do: gam user jsm...@contoso.com check serviceaccount

What do you get?

Ross
On Fri, Feb 3, 2017 at 1:50 PM, Joe Tierney <joe.t...@umzuzu.com> wrote:
GAM hums like a well oiled machine. It's a beautiful gift. I use it constantly. One scope I've never gotten to work is any command related to GoogleDriveManagement

GAM generates the error: Authentication Token Error - unauthorized_client: Client is unauthorized to retrieve access tokens using this method or unauthorized_client: Unauthorized client or scope in request.

So

gam user jsm...@contoso.com show filelist todrive 

= error.

I've never had any issue running any other GAM commands related to Users, Groups, OUs, Domains, etc. Any feedback or suggestions welcome. 

--
You received this message because you are subscribed to the Google Groups "GAM for G Suite" group.
To unsubscribe from this group and stop receiving emails from it, send an email to google-apps-manager+unsubscribe...@googlegroups.com.



--

--
You received this message because you are subscribed to the Google Groups "GAM for G Suite" group.
To unsubscribe from this group and stop receiving emails from it, send an email to google-apps-manager+unsub...@googlegroups.com.
To post to this group, send email to google-apps-manager@googlegroups.com.

Visit this group at https://groups.google.com/group/google-apps-manager.
To view this discussion on the web visit https://groups.google.com/d/msgid/google-apps-manager/cec3ff38-1f04-4462-ac71-cc2a817a93be%40googlegroups.com.

For more options, visit https://groups.google.com/d/optout.



--

Joe Tierney

unread,
Feb 3, 2017, 5:42:27 PM2/3/17
to GAM for G Suite
Indeed. Thank you for the feedback. Have a great weekend. 


On Friday, February 3, 2017 at 4:37:44 PM UTC-6, Ross Scroggs wrote:
Joe,

Sometimes the enabling takes place almost immediately, I've had some users report an hour, patience is a virtue.

Ross
On Fri, Feb 3, 2017 at 2:34 PM, Joe Tierney <joe.t...@umzuzu.com> wrote:
"FAIL"  across the board. I've added the client name and scopes ... gave it ~30 minutes. Still fails. Not sure if it depends on the type of domain, this is EDU. I can test on some others. 

On Friday, February 3, 2017 at 3:55:39 PM UTC-6, Ross Scroggs wrote:
Joe,

Do: gam user jsm...@contoso.com check serviceaccount

What do you get?

Ross
On Fri, Feb 3, 2017 at 1:50 PM, Joe Tierney <joe.t...@umzuzu.com> wrote:
GAM hums like a well oiled machine. It's a beautiful gift. I use it constantly. One scope I've never gotten to work is any command related to GoogleDriveManagement

GAM generates the error: Authentication Token Error - unauthorized_client: Client is unauthorized to retrieve access tokens using this method or unauthorized_client: Unauthorized client or scope in request.

So

gam user jsm...@contoso.com show filelist todrive 

= error.

I've never had any issue running any other GAM commands related to Users, Groups, OUs, Domains, etc. Any feedback or suggestions welcome. 

--
You received this message because you are subscribed to the Google Groups "GAM for G Suite" group.
To unsubscribe from this group and stop receiving emails from it, send an email to google-apps-manager+unsub...@googlegroups.com.



--

--
You received this message because you are subscribed to the Google Groups "GAM for G Suite" group.
To unsubscribe from this group and stop receiving emails from it, send an email to google-apps-manager+unsub...@googlegroups.com.
To post to this group, send email to google-ap...@googlegroups.com.
Visit this group at https://groups.google.com/group/google-apps-manager.



--

Joe Tierney

unread,
Feb 3, 2017, 6:11:51 PM2/3/17
to GAM for G Suite
Ding ding. We're in business. Thank you for the help! 

Cheers

On Friday, February 3, 2017 at 4:37:44 PM UTC-6, Ross Scroggs wrote:
Joe,

Sometimes the enabling takes place almost immediately, I've had some users report an hour, patience is a virtue.

Ross
On Fri, Feb 3, 2017 at 2:34 PM, Joe Tierney <joe.t...@umzuzu.com> wrote:
"FAIL"  across the board. I've added the client name and scopes ... gave it ~30 minutes. Still fails. Not sure if it depends on the type of domain, this is EDU. I can test on some others. 

On Friday, February 3, 2017 at 3:55:39 PM UTC-6, Ross Scroggs wrote:
Joe,

Do: gam user jsm...@contoso.com check serviceaccount

What do you get?

Ross
On Fri, Feb 3, 2017 at 1:50 PM, Joe Tierney <joe.t...@umzuzu.com> wrote:
GAM hums like a well oiled machine. It's a beautiful gift. I use it constantly. One scope I've never gotten to work is any command related to GoogleDriveManagement

GAM generates the error: Authentication Token Error - unauthorized_client: Client is unauthorized to retrieve access tokens using this method or unauthorized_client: Unauthorized client or scope in request.

So

gam user jsm...@contoso.com show filelist todrive 

= error.

I've never had any issue running any other GAM commands related to Users, Groups, OUs, Domains, etc. Any feedback or suggestions welcome. 

--
You received this message because you are subscribed to the Google Groups "GAM for G Suite" group.
To unsubscribe from this group and stop receiving emails from it, send an email to google-apps-manager+unsub...@googlegroups.com.



--

--
You received this message because you are subscribed to the Google Groups "GAM for G Suite" group.
To unsubscribe from this group and stop receiving emails from it, send an email to google-apps-manager+unsub...@googlegroups.com.
To post to this group, send email to google-ap...@googlegroups.com.
Visit this group at https://groups.google.com/group/google-apps-manager.



--

Felix G

unread,
Jun 23, 2017, 5:43:43 PM6/23/17
to GAM for G Suite
sorry for the newbie question, how did you add the client name and the scopes?

MDP

unread,
Jul 14, 2017, 12:39:25 PM7/14/17
to GAM for G Suite
When you run the check serviceaccount and scopes fail it will give you a URL and instructions.

Dennis M

unread,
Sep 10, 2020, 1:10:52 PM9/10/20
to GAM for G Suite
Incase this happens to anyone else!

This error will happen if you are running some commands on a group...

Kept me confused for a while

Ross Scroggs

unread,
Sep 10, 2020, 1:55:35 PM9/10/20
to google-ap...@googlegroups.com
Dennis,

Can you amplify on what you mean by: "This error will happen if you are running some commands on a group..."

Thanks,

Ross


This message contains information which may be confidential and/or protected by attorney-client privilege.  Unless you are the addressee, you may not use, copy or disclose to anyone this message or any information contained in this message.  If you have received this message in error, please send me an email and delete this message.   Thank you.

--
You received this message because you are subscribed to the Google Groups "GAM for G Suite" group.
To unsubscribe from this group and stop receiving emails from it, send an email to google-apps-man...@googlegroups.com.
To view this discussion on the web visit https://groups.google.com/d/msgid/google-apps-manager/71f4602c-d23b-4222-a406-c337926ed555n%40googlegroups.com.


--

Mike McLoughlin

unread,
Aug 14, 2023, 3:39:38 AM8/14/23
to GAM for Google Workspace
Hi Ross

I just stumbled upon this old thread via a Google search as I was seeing this error while trying to delegate an account.

What Dennis is alluding to is carrying out such tasks on group emails rather than single user accounts, so the following command will fail with that error.

gam user [group email] add delegate [user account] 

I hope this helps others arriving here.

- Mike

Reply all
Reply to author
Forward
0 new messages