show labels - requested client not authorized

[Mark Hewitt]

Hi there!

Got an issue when I use "show labels"...

C:\Windows\system32>gam all users show labels

Getting all users in Google Apps account (may take some time on a large account)...

Got 84 users...done getting 72 users.

Error: access_denied: Requested client not authorized.

I can get info on users just fine and other commands, why doesn't this work?

[S. Joyce]

I see the same issue in GAM 3.4.2, Python under Ubuntu.  I believe we've authorized all scopes, so I'm not understanding what's going on.

Same issue with the new 3.4.2. commands "show driveactivity" and "show gmailprofile".

Sean

[Glen Pringle]

The documentation for the authorization is out of date.

I had to add the "Apps Activity API" (step 1. vi.) and under the section "Creating Your Own OAuth2service.json" step viii. the API scopes needed were:

https://www.googleapis.com/auth/calendar,https://www.googleapis.com/auth/drive,https://www.googleapis.com/auth/activity,https://mail.google.com/

Once I made the above changes I was able to run the commands show labels | driveactivity | gmailprofile.

--
Glen Pringle

Senior Business Analyst (Google Apps Specialist) | eSolutions | Monash University

Tel: 990 55199 | 0400 077 913

--
You received this message because you are subscribed to the Google Groups "Google Apps Manager" group.
To unsubscribe from this group and stop receiving emails from it, send an email to google-apps-man...@googlegroups.com.
To post to this group, send email to google-ap...@googlegroups.com.
Visit this group at http://groups.google.com/group/google-apps-manager.
To view this discussion on the web visit https://groups.google.com/d/msgid/google-apps-manager/a5bbcb8d-916f-4aa1-8dfe-3c93d098794c%40googlegroups.com.

For more options, visit https://groups.google.com/d/optout.

[Sean Joyce]

Glen,

Thanks--that did the trick for me!  Re-do the API access adding "Apps Activity API" and "Gmail API" (in order for "show labels" to work), and then appending those two pieces to the end of the API scopes URL.

I made that suggestion in Brian Gray's document on configuring client_secrets/Oauth files as well.

Best,

Sean

To view this discussion on the web visit https://groups.google.com/d/msgid/google-apps-manager/CAApgXf7M9o-5PxCx-%2BScvcema5H-4wp6ABMU70K3gaXYBteNnQ%40mail.gmail.com.

[Brian Gray]

On Thursday, December 11, 2014 8:02:17 AM UTC-6, S. Joyce wrote:

Thanks--that did the trick for me!  Re-do the API access adding "Apps Activity API" and "Gmail API" (in order for "show labels" to work), and then appending those two pieces to the end of the API scopes URL.

I made that suggestion in Brian Gray's document on configuring client_secrets/Oauth files as well.

I updated my document and the wiki page to reflect these requirements.

bkg 

[Jim Karlin]

Revisiting this topic, I'm having the same issue.

My scopes were correct in the admin console, but I didn't have the Activity API enabled in the Developers Console.

Do I need to reissue my JSON keys?

Thanks

Jim