ERROR: Reauthentication is needed. Please run `gcloud auth application-default login` to reauthenticate.

[Ronald van Spengen]

For one domain I am receiving an the following error message whenever I try certain commands. Most commands are working fine but e.g. "gam calendar us...@domain.com showacl" will yield:

ERROR: Reauthentication is needed. Please run `gcloud auth application-default login` to reauthenticate.

Whenever I fill in "gcloud auth application-default login` to reauthenticate" into the macos terminal I get:

zsh: command not found: gcloud

I think there is some authentication on Google Cloud not setup correctly, since if I reinstall GAM for this domain it works fine for about one day after which I receive the error message again.

Does anyone have any tips in troubleshooting this issue?

[Jay Lee]

The problem domain has Google Cloud Session configured:

https://support.google.com/a/answer/9368756?hl=en

you have 3 options:

1. Mark your GAM project (the project value in your client_secrets.json file) as trusted and then exempt trusted apps from Cloud Session length on the cloud session page in the admin console.
2. If you aren't using GAM to manage Google Vault exports (download exported data, copy exported data to other GCS buckets). Then you can re-run authentication and make sure Google Cloud Storage is not selected. Upgrading to the latest version of GAM will actually do this for you as Google Cloud Storage is no longer selected by default.
3. Deal with the issue by running "gam oauth revoke" and then "gam oauth create" each time you get this error.

Jay

Jay Lee

--
You received this message because you are subscribed to the Google Groups "GAM for Google Workspace" group.
To unsubscribe from this group and stop receiving emails from it, send an email to google-apps-man...@googlegroups.com.
To view this discussion on the web visit https://groups.google.com/d/msgid/google-apps-manager/a0a28c8e-2fc1-4c15-9c34-0f0e314b4fd5n%40googlegroups.com.

[Ronald van Spengen]

Hi Jay,

Thank you so much for your quick reply!

I will discuss it with the customer what the best way forward is.

Have a nice day ;)