Cannot create customer under child MCC

[Andy Tsai]

Hi Ads API support,

I have a master MCC 777-184-9643 with basic API access token.

And I also have a child MCC 916-749-8242.

I can get information under child MCC by ads api.
But when I tried to create new customer under child MCC,

I got error as below, is there anything I should do before CREATE api?

Thanks.

Request made: ClientCustomerId: 9167498242, Host: googleads.googleapis.com:443, Method: /google.ads.googleads.v5.services.CustomerService/CreateCustomerClient, RequestId: nM2JfKwbEfWUTAfy13zO5g, IsFault: True, FaultMessage: The user does not have permission to perform this action on the resource or call a method.
Request with ID "nM2JfKwbEfWUTAfy13zO5g" failed with status "PERMISSION_DENIED" and includes the following errors:
        Error with message "The user does not have permission to perform this action on the resource or call a method.".

 

Traceback (most recent call last):
  File "/Users/andytsai/Venv/38/lib/python3.8/site-packages/google/ads/google_ads/interceptors/exception_interceptor.py", line 141, in _handle_grpc_failure
    raise self._get_error_from_response(response)
google.ads.google_ads.errors.GoogleAdsException: (<_InactiveRpcError of RPC that terminated with:
        status = StatusCode.PERMISSION_DENIED
        details = "The caller does not have permission"
        debug_error_string = "{"created":"@1605059874.087255000","description":"Error received from peer ipv4:172.217.27.138:443","file":"src/core/lib/surface/call.cc","file_line":1062,"grpc_message":"The caller does not have permission","grpc_status":7}"
>, <_InactiveRpcError of RPC that terminated with:
        status = StatusCode.PERMISSION_DENIED
        details = "The caller does not have permission"
        debug_error_string = "{"created":"@1605059874.087255000","description":"Error received from peer ipv4:172.217.27.138:443","file":"src/core/lib/surface/call.cc","file_line":1062,"grpc_message":"The caller does not have permission","grpc_status":7}"
>, errors {
  error_code {
    authorization_error: ACTION_NOT_PERMITTED
  }
  message: "The user does not have permission to perform this action on the resource or call a method."
}

, 'nM2JfKwbEfWUTAfy13zO5g')