"gam print contacts" errors with "Service not applicable/Does not exist"

[Joetje F]

This started to happen 2 days ago so doesn't look like a GAM issue but perhaps anyone else has encountered the same - I haven't had a response from Google back yet.

When I issue the command "gam print contacts" it errors out with:

Getting all Contacts for <primary-domain>

Domain: <primary-domain>, Service not applicable/Does not exist

<primary-domain> is the domain as configured in gam.cfg (gam config verify | grep domain)

The strange thing is that if I change the domain to a secondary domain in gam.cfg then it works as expected:

gam config domain <secondary-domain> save

Config File: /home/user-dir/.gam/gam.cfg, Saved

gam print contacts

Getting all Contacts for <secondary-domain>

Got 2522 Contacts...

I'm using the latest version of gamadv-x 4.88.05 but it also happens on an earlier version. As I mentioned before, it doesn't look like a GAM issue but was wondering if anyone else had the same issue and got some sort of response back from Google. I don't think there is an API explorer option for shared contacts?

[Xy Zi]

Same here!  I'm thinking maybe it has something to do with this:  https://gsuiteupdates.googleblog.com/2019/06/third-party-apps-gmail-data.html?utm_source=feedburner&utm_medium=feed&utm_campaign=Feed%3A+GoogleAppsUpdates+%28G+Suite+Update+Alerts%29  but I could be wrong.  For me it's happening, only on some users, when I run a script to update shared contacts.  It seems like some sort of permissions issue but my service scopes look good so I'm not sure what's up, still trying to figure it out but getting to where I don't know what else to check.

[Sam Woodhouse]

Assuming you're running gam on a single tenancy then Google has advised that setting your project to internal only, therefore, doesn't have issues with their new trusted app setting.

Instructions are here, if you scroll down and expand "How do I determine if I need to submit my app for restricted scope verification?" under verification process".

Though, the instructions are basically. Go here, select your project and the section at the top for "application type" select "Internal" instead of "public".

Not sure if that will solve your issue, but I've updated mine just to try and avoid potential issues.

[Xy Zi]

Thanks Sam!  I changed that setting but also discovered if I go here https://myaccount.google.com/security and check third party app access the users that don't have GAM listed in there are the ones having trouble.  The ones that have GAM in their list are fine.  So I think that's the problem but how to fix this?  Yesterday I tried going through gam oauth create again & making sure all scopes were authorized but not sure how to force all accounts to trust/consent to this app having access to their account.  I checked & I've still got the service account with domain wide delegation enabled but is there something else I need to do now because of the changes Google implemented a couple days ago?

[Sam Woodhouse]

Based on what you're saying it sounds like the change they've made. As Google stated that the api limitation would not be retrospective, so anyone who had authorised it before the 8th would be fine it was just the people after.

I'm not sure if that internal option is like some of the other api related things where they can take a few hours to update.

Alternatively, there is an option in the admin console to whitelist trusted 3rd party apps. So if its not working by tomorrow morning you may need to include your account in that whitelist.

--
You received this message because you are subscribed to the Google Groups "GAM for G Suite" group.
To unsubscribe from this group and stop receiving emails from it, send an email to google-apps-man...@googlegroups.com.
To post to this group, send email to google-ap...@googlegroups.com.
Visit this group at https://groups.google.com/group/google-apps-manager.
To view this discussion on the web visit https://groups.google.com/d/msgid/google-apps-manager/0020d622-074b-4b1f-b2b2-f2c275a04203%40googlegroups.com.
For more options, visit https://groups.google.com/d/optout.

********************************************************************************

This email has been sent from Co-operative Group Limited, a registered society incorporated in England and Wales (525R) or from one of its group undertakings (jointly "the Co-op") as follows, each of which is registered in England and Wales and has its registered office at 1 Angel Square, Manchester, M60 0AG (except The Manx Co-operative Society Limited and Nisa Retail Limited whose registered addresses are listed below):

Co-operative Group Food Limited (26715R)

Co-operative Foodstores Limited (32443R)

Funeral Services Limited (30808R)

CFS Management Services Limited (05564787)

Co-operative Legal Services Limited (05671209)

Co-operatives E-Store Limited (29166R)

The Co-operative Care Limited (31438R)

Co-operative Community Investment Foundation (04117665)

The Manx Co-operative Society Ltd (IM25) (which is registered in the Isle of Man and whose registered office is at 4 Myrtle Street, Douglas, IM1 1ED)

Nisa Retail Limited (00980790) whose registered address is the Member Support Centre Waldo Way, Normanby Enterprise Park, Scunthorpe, North Lincolnshire, United Kingdom, DN15 9GE

To the extent that this email relates to the supply of groceries to Co-operative Group Limited or any of its group undertakings, it is sent subject to Co-operative Group Limited’s Standard Terms of Supply of Groceries. For the purchase of non-grocery related goods and services, the Co-operative Group non-grocery standard purchasing terms apply to all orders placed, save where a contract is negotiated and agreed. For full details please go to coop.co.uk/purchasingterms

Confidentiality Notice

This email is private and confidential and may be legally privileged. If you have received this email in error, please send it back to us, and immediately and permanently delete it. Do not use, copy or disclose the information contained in this email or in any attachment.

The Co-op uses security software which routinely monitors and sometimes blocks emails. Further monitoring may be conducted for general business or security purposes, but only where lawfully permitted. The Co-op cannot accept liability for any damage which you may sustain as a result of software viruses or interception or interruption of email, so please carry out you own virus checks before opening an attachment. 

A list of the directors for each of the societies and companies is available at the registered office.

The Co-operative Legal Services and Co-op Legal Services are trading names for Co-operative Legal Services Limited which is authorised and regulated by the Solicitors Regulation Authority under SRA number 567391.

The Co-op Foundation is a working name of the Co-operative Community Investment Foundation which is an independent charity regulated by the Charity Commission for England and Wales under registered number 1093028 and by the Office of the Scottish Charity Regulator (OSCR) under registered number SCO48102.

********************************************************************************

Disclaimer 00001

[Xy Zi]

I think you may be correct that it will take a little time for the setting change to apply so I'll try again tomorrow & see what happens.

To unsubscribe from this group and stop receiving emails from it, send an email to google-apps-manager+unsub...@googlegroups.com.

[Xy Zi]

My issue is now resolved but was probably a different root cause, see here for details:  https://groups.google.com/forum/#!topic/google-apps-manager/gNmwfACuDmA

On Thursday, July 4, 2019 at 11:14:53 AM UTC-4, Joetje F wrote: