Insufficient scope when using ConversionUploadService

[gcp admin]

Hi,

I've been using the Google Ads API to manage our accounts. I've been able to do things like download reports, edit campaign / ad group criteria just fine. 

However, I'm currently experiencing problems when trying to upload offline conversions. Using the same credentials as I've always (successfully) used, I now get the error message below.

I'd ben very grateful if you have any suggestions for what might be causing this!

Cheers, Ben

Headers: {
  "google.rpc.errorinfo-bin": "\n\u001fACCESS_TOKEN_SCOPE_INSUFFICIENT\u0012\u000egoogleapis.com\u001a#\n\u0007service\u0012\u0018googleads.googleapis.com\u001aZ\n\u0006method\u0012Pgoogle.ads.googleads.v16.services.ConversionUploadService.UploadClickConversions",
  "grpc-status-details-bin": "\b\u0007\u0012/Request had insufficient authentication scopes.\u001a\u0001\n(type.googleapis.com/google.rpc.ErrorInfo\u0012\u0001\n\u001fACCESS_TOKEN_SCOPE_INSUFFICIENT\u0012\u000egoogleapis.com\u001a#\n\u0007service\u0012\u0018googleads.googleapis.com\u001aZ\n\u0006method\u0012Pgoogle.ads.googleads.v16.services.ConversionUploadService.UploadClickConversions",
  "www-authenticate": "Bearer realm=\"https://accounts.google.com/\", error=\"insufficient_scope\", scope=\"https://www.googleapis.com/auth/adwords https://adwords.google.com/api/adwords https://adwords.google.com/api/adwords/ https://adwords.google.com/api/adwords/cm\""
}

*** google.api_core.exceptions.PermissionDenied: 403 Request had insufficient authentication scopes. [reason: "ACCESS_TOKEN_SCOPE_INSUFFICIENT"
domain: "googleapis.com"
metadata {
  key: "service"
  value: "googleads.googleapis.com"
}
metadata {
  key: "method"
  value: "google.ads.googleads.v16.services.ConversionUploadService.UploadClickConversions"
}

[Google Ads API Forum Advisor]

Hi,

Thank you for contacting the Google Ads API support team.

I could see that you are encountering "ACCESS_TOKEN_SCOPE_INSUFFICIENT" error when using the Google Ads API. To resolve this issue, please ensure that your access token has the necessary permissions to upload offline conversions. You can check the scopes associated with your access token by visiting the Google Developers Console. 

That being said, uploadClickConversions requires the following OAuth scope:

• https://www.googleapis.com/auth/adwords

If you've confirmed these details and the issue still persists, please provide us with the complete API request and response logs with the request ID and request header  so that we can investigate further.

If you are using a client library and haven't enabled the logging yet, I would request you to enable logging for the specific client library that  you are using. You can refer to the guides Java, .Net, PHP, Python, Ruby or Perl to enable logging at your end. For REST interface requests, you can enable logging via the curl command by using the -i flag. 

You can share the requested details via Reply privately to the author option or a direct private reply to this email.​ ​ ​ ​ ​

This message is in relation to case "ref:!00D1U01174p.!5004Q02tPKZJ:ref" (ADR-00232857)

Thanks,
 

Google Ads API Team