setup error

[Wael Awwad]

Dear all

I downloaded the latest version of GAM, and complete the setup process( creating project, credentials, till getting the json files client_secrets,oauth2service)

BUT

when I tried to run the command

gam info domain 

I got the message ( Select the authorized scopes by entering a number....)

then, I entered (c) to continue

then, I got a message to verifying that

here I got an error message:

Authorization Error
Error 400: admin_policy_enforced
Account restricted
Learn more
Request Details

note that i tired that twice:

one using the super admin account for my workspace

the other using an admin over groups and users 

and I got the same result

any help please?

[Kim Nilsson]

THAT'S A GOOD SIGN! :-)

It means you have implemented the most security minded setting available in Google Workspace, API Access Control / Block all third-party API access.

To make this work you have to allow the Client ID you find if you click the down-arrow.
You have to set it to Trusted in your domain for the automatic installation to work.

The setting is here.

https://admin.google.com/ac/owl/list?tab=configuredApps

There you click App app, and then OAuth App Name Or Client ID, and paste the Client ID that you copied from the warning message.

You can see I have done that with GAM Project Creation in the image.

Then you can run the auth again.

/Kim

[Wael Awwad]

Dear Kim

I did that

but still the same problem

is there anything I missed?

[Kim Nilsson]

On the first page of API Access Control, do you allow internal projects access? It's another box below the one that blocks all external (third-party) access.

/Kim 

[Wael Awwad]

yes, it is allowed

[Kim Nilsson]

Oh, did you remove the tick for the Block all 3rd party?

It's not ticked in your image. 

/Kim 

[Wael Awwad]

yes it was unchecked,

but i checked it now, but the problem still presents

--
You received this message because you are subscribed to a topic in the Google Groups "GAM for Google Workspace" group.
To unsubscribe from this topic, visit https://groups.google.com/d/topic/google-apps-manager/865aF0iv9kM/unsubscribe.
To unsubscribe from this group and all its topics, send an email to google-apps-man...@googlegroups.com.
To view this discussion on the web visit https://groups.google.com/d/msgid/google-apps-manager/CAGPzzFsa77pmDKV3BFUe0Gd0aejgJU_pOWtcx9PauEM0Soxk%2BQ%40mail.gmail.com.

[Jay Lee]

If you are using Workspace EDU, make sure your super admin you are using with GAM is marked as older than 18: https://support.google.com/a/answer/10651918?hl=en

Also make sure that services without individual controls is enabled for the super admin's OrgUnit: https://support.google.com/a/answer/7646040?hl=en

You received this message because you are subscribed to the Google Groups "GAM for Google Workspace" group.
To unsubscribe from this group and stop receiving emails from it, send an email to google-apps-man...@googlegroups.com.
To view this discussion on the web visit https://groups.google.com/d/msgid/google-apps-manager/CAPHCJ9vRCwNAxwEfiq8v0-4TPhExDD31mV5JQjLur7kzH2gH0A%40mail.gmail.com.

[Wael Awwad]

thank you very much all

its worked now

the key issue was (services without individual controls is enabled)