AuthorizationError.USER_PERMISSION_DENIED

[Ashish Pathak]

Hello,

When I tried to access one of the account in our MCC with customer Id 'xxx-xxx-xxxx'  using Adwords API  I am getting error Type: AuthorizationError.USER_PERMISSION_DENIED

Same script works on other account with customer Id 'yyy-yyy-yyyy' both accounts are under same MCC and I can check and make update in account with customer Id 'xxx-xxx-xxxx' using web interface. What can be possible reason for the error?

Regards,

Ashish Pathak

 

[Vincent Racaza (AdWords API Team)]

Hi Ashish,

The USER_PERMISSION_DENIED error occurs when you are using OAuth2 credentials that has no access to the client account that you are targeting as your clientCustomerId.

With this, could you provide the SOAP request and response logs that was generated when you encountered the error as well as the email address that corresponds to your OAuth2 credentials? Please send this information via the Reply privately to author option. If you haven't enabled the SOAP logs yet, you can enable it by following this guide (in Java). Enabling of SOAP logs is also available to other client libraries that we support.

Thanks,

Vincent

AdWords API Team

[Ashish Pathak]

Hi Vincent,

Thank you for the help issue is resolved now it was error on our end.

[Tim]

Hi;

I am creating a (online) tool for users to quickly pull some stats from their Adwords account.

I have obtained a token with basic access.

My webpage is basicly using this setup: https://github.com/googleads/googleads-php-lib/wiki/API-access-on-behalf-of-your-clients-(web-flow)

However, when i try with my TEST account it all works. When i try with another (real) Adwords account I get the error:

AuthorizationError.USER_PERMISSION_DENIED

I saw some answers in this forum related to this error saying this is a respons for "unlinked" account.

However:

The whole point of my (online) "tool" is to extract and give some info (reports) from "unlinked" accounts. Any ideas how to do this?

[Peter Oliquino]

Hi Tim,

Yes, one of the reasons for getting the AuthorizationError.USER_PERMISSION_DENIED error is being that the account is not linked to an MCC that can directly manage accounts. Another reason would be that you are using OAuth2 credentials which do not have access to the specific client account. This being said, users/developers may still access unlinked client accounts if they have the correct OAuth2 credentials.

To achieve this, the OAuth2 credentials will need to be created while logged in using an email address which has access to the specific AdWords (client/MCC) account and preferably has administrative access. The guide for creating the said credentials can be found here. Let me know if this helps.

Additionally, I would recommend that you create a new thread for new concerns so we can better track each one accordingly.

Thanks and regards,

Peter

AdWords API Team