Authorization Error

[Yisroel Pollock]

I've always run GAM from a Cloud Shell but needed it running on my always on work desktop.  Trying to do a new install but when I put in the authorization command of Gam oauth create, - It takes me to the browser to give authorization and them gives me an authorization error that I am pasting below (with some info deleted). I am a super admin on this account.

Error 400: invalid_scope

Some requested scopes cannot be shown: [https://www.googleapis.com/auth/chrome.management.policy, https://www.googleapis.com/auth/chrome.management.reports.readonly, https://www.googleapis.com/auth/admin.contact.delegation, https://www.googleapis.com/auth/admin.chrome.printers, https://www.googleapis.com/auth/admin.directory.device.chromebrowsers, https://www.googleapis.com/auth/cloud-identity.userinvitations, https://www.googleapis.com/auth/cloud-identity.groups, https://www.googleapis.com/auth/classroom.courseworkmaterials, https://www.googleapis.com/auth/classroom.topics, https://www.googleapis.com/auth/classroom.announcements, https://www.googleapis.com/auth/classroom.guardianlinks.students, https://www.googleapis.com/auth/classroom.coursework.students, https://www.googleapis.com/auth/classroom.profile.emails, https://www.googleapis.com/auth/classroom.profile.photos, https://www.googleapis.com/auth/classroom.rosters, https://www.googleapis.com/auth/classroom.courses, https://www.googleapis.com/auth/ediscovery, https://www.googleapis.com/auth/siteverification, https://www.googleapis.com/auth/devstorage.read_only, https://www.googleapis.com/auth/admin.datatransfer, https://www.googleapis.com/auth/admin.directory.customer, https://www.googleapis.com/auth/admin.directory.resource.calendar, https://www.googleapis.com/auth/admin.reports.audit.readonly, https://www.googleapis.com/auth/admin.reports.usage.readonly, https://www.googleapis.com/auth/admin.directory.userschema, https://www.googleapis.com/auth/admin.directory.domain, https://www.googleapis.com/auth/admin.directory.device.mobile, https://www.googleapis.com/auth/admin.directory.device.chromeos, https://www.googleapis.com/auth/admin.directory.orgunit, https://www.googleapis.com/auth/apps.licensing, https://www.googleapis.com/auth/admin.directory.group, https://www.googleapis.com/auth/admin.directory.user, https://www.googleapis.com/auth/apps.groups.migration, https://www.googleapis.com/auth/admin.directory.rolemanagement, https://www.googleapis.com/auth/admin.directory.user.security, https://www.googleapis.com/auth/apps.groups.settings, https://www.googleapis.com/auth/contacts, http://sites.google.com/feeds, https://www.googleapis.com/auth/calendar]

Request Details

• access_type=offline
• login_hint=m...@myschool.edu
• response_type=code
• redirect_uri=http://localhost:8080/
• state=
• code_challenge_method=
• hd=myschool.edu
• client_id=
• code_challenge=
• scope=https://www.googleapis.com/auth/userinfo.email https://www.googleapis.com/auth/userinfo.profile https://www.googleapis.com/auth/calendar https://www.googleapis.com/auth/admin.directory.device.chromebrowsers https://www.googleapis.com/auth/chrome.management.reports.readonly https://www.googleapis.com/auth/chrome.management.policy https://www.googleapis.com/auth/classroom.announcements https://www.googleapis.com/auth/classroom.topics https://www.googleapis.com/auth/classroom.courseworkmaterials https://www.googleapis.com/auth/classroom.coursework.students https://www.googleapis.com/auth/classroom.courses https://www.googleapis.com/auth/classroom.profile.emails https://www.googleapis.com/auth/classroom.profile.photos https://www.googleapis.com/auth/classroom.rosters https://www.googleapis.com/auth/classroom.guardianlinks.students https://www.googleapis.com/auth/cloud-identity.groups https://www.googleapis.com/auth/cloud-identity.userinvitations https://www.googleapis.com/auth/devstorage.read_only https://www.googleapis.com/auth/admin.contact.delegation https://www.google.com/m8/feeds https://www.googleapis.com/auth/contacts https://www.googleapis.com/auth/admin.datatransfer https://www.googleapis.com/auth/admin.directory.device.chromeos https://www.googleapis.com/auth/admin.directory.customer https://www.googleapis.com/auth/admin.directory.domain https://www.googleapis.com/auth/admin.directory.group https://www.googleapis.com/auth/admin.directory.device.mobile https://www.googleapis.com/auth/admin.directory.orgunit https://www.googleapis.com/auth/admin.chrome.printers https://www.googleapis.com/auth/admin.directory.resource.calendar https://www.googleapis.com/auth/admin.directory.rolemanagement https://www.googleapis.com/auth/admin.directory.userschema https://www.googleapis.com/auth/admin.directory.user.security https://www.googleapis.com/auth/admin.directory.user https://www.googleapis.com/auth/apps.groups.migration https://www.googleapis.com/auth/apps.groups.settings https://www.googleapis.com/auth/apps.licensing https://www.googleapis.com/auth/admin.reports.audit.readonly https://www.googleapis.com/auth/admin.reports.usage.readonly https://www.googleapis.com/auth/siteverification https://sites.google.com/feeds https://www.googleapis.com/auth/ediscovery openid

[Ross Scroggs]

This same question has been asked/answered many times in the last few days, a little searching in the group will find the answer.

In brief, do not enable the following scope: Cloud Identity User Invitations API

Ross

This is a staff email account managed by Yeshiva Aharon Yaakov/Ohr Eliyahu.  This email and any files transmitted with it are confidential and intended solely for the use of the individual or entity to whom they are addressed. If you have received this email in error please notify the sender.

--
You received this message because you are subscribed to the Google Groups "GAM for Google Workspace" group.
To unsubscribe from this group and stop receiving emails from it, send an email to google-apps-man...@googlegroups.com.
To view this discussion on the web visit https://groups.google.com/d/msgid/google-apps-manager/b3f9d712-28de-45c3-bf82-b1756268b3c4n%40googlegroups.com.

--

Ross Scroggs

ross.s...@gmail.com

[Yisroel Pollock]

will do - gonna try it. Thanks for the little tip:-)

[Yisroel Pollock]

beautiful - it worked! Thank you!