cannot create customer under child MCC

[Lauren Fu]

Hi Ads API support,

I have a master MCC 777-184-9643 with basic API access token.

And I also have a child MCC 916-749-8242.

I can get information under child MCC by ads api.
But when I tried to create new customer under child MCC,

I got error as below, is there anything I should do before CREATE api?

Thanks.

Request made: ClientCustomerId: 9167498242, Host: googleads.googleapis.com:443, Method: /google.ads.googleads.v5.services.CustomerService/CreateCustomerClient, RequestId: nM2JfKwbEfWUTAfy13zO5g, IsFault: True, FaultMessage: The user does not have permission to perform this action on the resource or call a method.
Request with ID "nM2JfKwbEfWUTAfy13zO5g" failed with status "PERMISSION_DENIED" and includes the following errors:
        Error with message "The user does not have permission to perform this action on the resource or call a method.".

 

Traceback (most recent call last):
  File "/Users/andytsai/Venv/38/lib/python3.8/site-packages/google/ads/google_ads/interceptors/exception_interceptor.py", line 141, in _handle_grpc_failure
    raise self._get_error_from_response(response)
google.ads.google_ads.errors.GoogleAdsException: (<_InactiveRpcError of RPC that terminated with:
        status = StatusCode.PERMISSION_DENIED
        details = "The caller does not have permission"
        debug_error_string = "{"created":"@1605059874.087255000","description":"Error received from peer ipv4:172.217.27.138:443","file":"src/core/lib/surface/call.cc","file_line":1062,"grpc_message":"The caller does not have permission","grpc_status":7}"
>, <_InactiveRpcError of RPC that terminated with:
        status = StatusCode.PERMISSION_DENIED
        details = "The caller does not have permission"
        debug_error_string = "{"created":"@1605059874.087255000","description":"Error received from peer ipv4:172.217.27.138:443","file":"src/core/lib/surface/call.cc","file_line":1062,"grpc_message":"The caller does not have permission","grpc_status":7}"
>, errors {
  error_code {
    authorization_error: ACTION_NOT_PERMITTED
  }
  message: "The user does not have permission to perform this action on the resource or call a method."
}

, 'nM2JfKwbEfWUTAfy13zO5g')  

[Google Ads API Forum Advisor Prod]

Hi Lauren,

Thank you for reaching out. This error usually occurs when there is no link between the account authenticated in the request and the target account specified in the headers. As you are using the Google Ads API you need to include the login_customer_id in the header as mentioned in this blog post. Please use the email that has Standard or Admin Access to the manager account to generate the OAuth2 credentials and make the API call again.

Thanks and regards,
Xiaoming, Google Ads API Team

Xiaoming Google Ads API Team

ref:_00D1U1174p._5004Q27wVA0:ref