"Not Authorized to access this resource/api" when Creating Groups

Luis Giraldo

unread,

Jan 8, 2022, 6:23:32 AM1/8/22

to GAM for Google Workspace

Hi everyone!

I have a fresh installation of GAMADV in Google Cloud Shell. I've used GAM or GAMADV in various shapes for years but had never needed to interact with groups before, until now. I'm seeing this error when trying to create groups from a CSV list using GAMADV:

Command:

gam csv file.csv gam create group ~email

Error:

Group: grou...@domain.com, Create Failed: Not Authorized to access this resource/api

I can successfully do other tasks, like create users, update users, delete users, etc., but I cannot create groups. I can read and print groups, but not create them.

Things I've tried:

gam oauth delete && gam oauth create (no change)
uninstall and re-install GAMADV and the Cloud project (no change)
Confirmed APIs are all enabled
Adding additional scopes manually to the domain-wide delegation for the Client ID as listed in this post (no change)
Checked service account (output below)

If anybody has any ideas, I'd welcome your comments!

Cheers,

Luis

$ gam user us...@domain.com check serviceaccount
System time status
Your system time differs from admin.googleapis.com by less than 1 second PASS
Service Account Private Key Authentication
Authentication PASS
Service Account Private Key age; Google recommends rotating keys on a routine basis
Service Account Private Key age: 0 days PASS
Domain-Wide Delegation authentication:, User: us...@domain.com, Scopes: 26
https://mail.google.com/ PASS All scopes PASSED!

Service Account Client name: XXXXX is fully authorized.

Kim Nilsson

unread,

Jan 8, 2022, 7:58:40 AM1/8/22

to GAM for Google Workspace

gam update project

Just to see that gam is also happy with all the APIs.

Luis Giraldo

unread,

Jan 8, 2022, 2:23:30 PM1/8/22

to GAM for Google Workspace

Output of "gam update project":

APIs all seem to be enabled:

Project: gam-project-Xxxxx, Check 29 APIs
API: admin.googleapis.com, Already enabled

Ross Scroggs

unread,

Jan 8, 2022, 2:26:57 PM1/8/22

to google-ap...@googlegroups.com

Luis,

Send me a Meet/Zoom invitation.

Ross

--

ross.s...@gmail.com

--
You received this message because you are subscribed to the Google Groups "GAM for Google Workspace" group.
To unsubscribe from this group and stop receiving emails from it, send an email to google-apps-man...@googlegroups.com.
To view this discussion on the web visit https://groups.google.com/d/msgid/google-apps-manager/fce3377a-196f-4d30-8fc5-cc9308ce0234n%40googlegroups.com.

Luis Giraldo

unread,

Jan 8, 2022, 2:34:22 PM1/8/22

to GAM for Google Workspace

Thanks, Ross - emailed you a Zoom invite directly.

Cheers,

Luis

Luis Giraldo

unread,

Jan 8, 2022, 2:55:31 PM1/8/22

to GAM for Google Workspace

Many thanks to Ross for solving one of the most difficult problems to solve in this industry: PEBCAK 🤣 The CSV file had group addresses in the source domain (not the destination domain where we're working), so they couldn't be created. The API/resource error led me into a different rabbit hole. Cheers, Ross!