
Hi,
Thanks for reaching out to Google Ads API Forum.
With regards to your concern, I can see that you are encountering the PERMISSION_DENIED error. Kindly note that this error indicates that the authenticated user doesn't have the permission to do the change. If you're accessing a client customer, the manager's customer id must be set in the login-customer-id header.
You will need to ensure that the user / email address you used to generate the credentials indeed has access to the account in your request. If the user / email address has access or is associated with the MCC / manager account, you will need to specify the said MCC / manager account ID as the value of the login-customer-id field. For common structures in calling a request in API, you may refer to our API Call Structure for more information.
Links included in this email:
![]() |
Google Ads API Team |
Hi,
Can you please try regenerating your OAuth credentials by following our guide (https://developers.google.com/google-ads/api/docs/first-call/oauth-cloud-project)? I suggest that you check this guide (https://developers.google.com/google-ads/api/docs/oauth/internals#access_and_refresh_token) as well for more information on generating access and refresh tokens based on your application type. Please make sure that you are generating OAuth credentials for a user that has access to the Google Ads account that you're trying to access.
If the issue persists even after doing the above details, you may send us the below complete API logs generated on your end and the user / email address that you used in your authentication process for further investigation.
You may send these information to us via Reply privately to author option.