customerUserAccessInvitations 403 Forbidden

[Robert Desmond]

Hi there,

I am trying to invite a user to manage a Google Ads Account. In this case, I am using an MCC Test Account.

I am hitting this endpoint via a POST: https://googleads.googleapis.com/v7/customers/{customerId}/customerUserAccessInvitations:mutate

I am receiving a 403 status with message "Forbidden".

My post body is:

operation: {

create: {

accessRole: "STANDARD",

emailAddress: "MYE...@DOMAIN.COM****replace with any email",

},

},

I am sending the 'developer-token' in the header (which is working for other API calls).

I have also tried with the MCC id as 'login-customer-id'.

Same response: 403 Forbidden.

[Robert Desmond]

I have also tried with all of the possible accessRoles from here https://developers.google.com/google-ads/api/rest/reference/rest/v7/AccessRole

And I get the same 403 Forbidden

[Robert Desmond]

It is also using the same access token that was used to successfully get data from another endpoint which required the same scope: 

• https://www.googleapis.com/auth/adwords

[Google Ads API Forum Advisor Prod]

Hi Robert,

Thank you for reaching out.

Using the access_role would first require an allowlisting before it can be used in your API requests. That said, could you confirm if you have already been allowlisted? If not yet, then your requests would result in an error if this attribute is included.

Best regards,

Peter Laurence Napa Oliquino Google Ads API Team

ref:_00D1U1174p._5004Q2HzJm6:ref

[Robert Desmond]

I have now been approved for the use of the access token.

I am coming up against another problem whereby it appears that if the new email is not on a domain that is allowed by the customer (in the 'Allowed domains' section here: https://ads.google.com/aw/accountaccess/settings (see screenshot below)) then I will get a 'Bad Request' response.

Is there an API endpoint whereby I can allow this domain to be added?

Thanks

Robert

[Google Ads API Forum Advisor]

Hi Robert,

These endpoints are the only two available endpoints for customerUserAccessInvitations. There currently isn't a way to add allowed domains through the API. However, please let us know if you would like our team to make a feature request on your behalf.

Regards,
Matt
Google Ads API Team

Matt Google Ads API Team

ref:_00D1U1174p._5004Q2HzJm6:ref

[Robert Desmond]

Yes please. I would love to be able to add a domain to the safe list so we don’t have to send our users to the ads page and can just do this for them!!!

That would be an awesome feature!

Sent from my iPhone

On Jun 16, 2021, at 16:17, Google Ads API Forum Advisor <ads...@forumsupport.google> wrote:

 Hi Robert,

--
--
=~=~=~=~=~=~=~=~=~=~=~=~=~=~=~=~=~=~=~=~=~=~=~=~
Also find us on our blog:
https://googleadsdeveloper.blogspot.com/
=~=~=~=~=~=~=~=~=~=~=~=~=~=~=~=~=~=~=~=~=~=~=~=~
 
You received this message because you are subscribed to the Google
Groups "AdWords API and Google Ads API Forum" group.
To post to this group, send email to adwor...@googlegroups.com
To unsubscribe from this group, send email to
adwords-api...@googlegroups.com
For more options, visit this group at
http://groups.google.com/group/adwords-api?hl=en
---
You received this message because you are subscribed to a topic in the Google Groups "AdWords API and Google Ads API Forum" group.
To unsubscribe from this topic, visit https://groups.google.com/d/topic/adwords-api/_7y9COLGZaA/unsubscribe.
To unsubscribe from this group and all its topics, send an email to adwords-api...@googlegroups.com.
To view this discussion on the web visit https://groups.google.com/d/msgid/adwords-api/NkT2F000000000000000000000000000000000000000000000QUST0Q00DBOKczHOTw6L9HZRFcjxDA%40sfdc.net.