USER_PERMISSION_DENIED - User doesn't have permission to access customer.

67 views
Skip to first unread message

Jaime Oliver

unread,
Sep 28, 2022, 5:46:07 PM9/28/22
to Google Ads API and AdWords API Forum
I am having some real issues trying to use the Google Ads API.

I have followed all the steps to get the app running and authenticated. I am using the LaravelExampleApp from here: 
https://github.com/googleads/google-ads-php/blob/HEAD/examples/LaravelSampleApp/README.md

I am getting this error when trying to run a report : "authorizationError":"USER_PERMISSION_DENIED"},"message":"User doesn't have permission to access customer. Note: If you're accessing a client customer, the manager's customer id must be set in the 'login-customer-id' header.

I am using the developerToken from my live manager account from the API Center along with my cientID and clientSecret and refreshToken from the GCP Project and OAuth credentials. I created a TEST Manager account so that I could create a TEST CLIENT account. I updated those credentials inside the google_ads_php.ini file in my project folder.

The app runs but when I try to run a report against the test client account using the test client_id I get that error. I tried to link or create the test client account inside my live manager account but was unable to do so.

My developer token is only allowed to run reports on test accounts but it doesn't let me run reports on any of the test accounts I created under the Test Manager account.

This is all overly complicated. Can anyone provide some assistance?

Google Ads API Forum Advisor

unread,
Sep 29, 2022, 6:06:06 AM9/29/22
to ja...@buytesmart.com, adwor...@googlegroups.com
Hi Jaime,

Thank you for reaching us out. I am Sherwin from Google Ads API support team. I hope that you are doing well today.

Moving forward to your concern, I understand that you have 2 MCC accounts. Could you please provide us those 2 MCC accounts for us to check it on our end. The USER_PERMISSION_DENIED means that a user doesn't have permission to access a customer and you’re accessing a client customer using 'login-customer-id’ in the request.

To address the above error, you will need to ensure that the user / email address you used to generate the credentials indeed has access to the account in your request. If the user / email address has access or is associated with the MCC / manager account, you will need to specify the said MCC / manager account ID as the value of the login-customer-id field.

If the issue persists, please provide us the complete request and response logs with request ID and request header generated on your end? You can provide it via Reply privately to the author option. If this option is not available, then send it instead on this email address googleadsa...@google.com. If you haven't enabled the logging yet, logging can be enabled by navigating to the Client libraries > Your client library (ex. Java) > Logging documentation, which you can access from this link.

Kind regards,
Google Logo
Sherwin Vincent
Google Ads API Team
 


ref:_00D1U1174p._5004Q2euSYB:ref
Reply all
Reply to author
Forward
0 new messages