authentication_error: NOT_ADS_USER

[Pat Chaiyabud]

Hi there,

I'm trying to use service account to make request to google ads api and have been getting the following error

        status = StatusCode.UNAUTHENTICATED
        details = "Request is missing required authentication credential. Expected OAuth 2 access token, login cookie or other valid authentication credential. See https://developers.google.com/identity/sign-in/web/devconsole-project."
        debug_error_string = "UNKNOWN:Error received from peer ipv**** {grpc_message:"Request is missing required authentication credential. Expected OAuth 2 access token, login cookie or other valid authentication credential. See https://developers.google.com/identity/sign-in/web/devconsole-project.", grpc_status:16, created_time:"2022-10-06T00:30:16.5288888+00:00"}"

 error_code {
    authentication_error: NOT_ADS_USER
  }
  message: "User in the cookie is not a valid Ads user."
}

I got the following details for authorization but wonder if I've missed something.

"type": "service_account",
"project_id": "",
"private_key_id": "",
"private_key": ""
"client_email": "",
"client_id": "",
"auth_uri": "",
"scope": "",
"token_uri": "",
"auth_provider_x509_cert_url": "",
"client_x509_cert_url": "",
"impersonated_email": "",
"developer_token": "",
"use_proto_plus": ""

 After going back to document again, I guess that impersonated email could be the missing piece. Could you tell me how and where to get this email? Is it from Google Ads Manager?

Cheers  

[Google Ads API Forum Advisor]

Hi Pat,

Thank you for reaching us out. I am Sherwin from Google Ads API support team. I hope that you are doing well today.

With regard to your concern "After going back to document again, I guess that impersonated email could be the missing piece. Could you tell me how and where to get this email? Is it from Google Ads Manager?", you can put any email address which is managed by Google Workspace domain which has a Google Ads account. As mentioned here on this document, A service account can only impersonate users (email addresses) in the same Google Workspace.

If you have other concerns, please let us know.

Kind regards,

Sherwin Vincent Google Ads API Team

ref:_00D1U1174p._5004Q2ey12e:ref