PLEASE HELP! Error 400: Admin_policy_enforced

[sami dean]

Can someone please help!!! I've spent hours trying to figure out how to resolve  this issue with no success.

I'm getting a "Access blocked: Authorization Error" Error 400: admin_policy_enforced when passing Scopes.

I cannot figure out where this policy exists and how to unrestrict it.

Error 400: admin_policy_enforced

Request details: access_type=offline login_hint=mtsa...@rivergatehigh.com response_type=code redirect_uri=http://127.0.0.1:8080/ state=OI9V5FGCotsgig4AA6O8ObmK1woaNG code_challenge_method=S256 hd=rivergatehigh.com client_id=115110924915-0fqld0qgt210p42ru32h97qbrd5pc3hj code_challenge=p4HmgF81xp0ej9KpASWIYSwmsn6TtoJ4S7azFQMoO_8 scope=https://www.googleapis.com/auth/admin.directory.device.mobile https://www.googleapis.com/auth/classroom.courses https://www.googleapis.com/auth/admin.directory.user.security https://www.googleapis.com/auth/chrome.management.telemetry.readonly https://www.googleapis.com/auth/admin.reports.usage.readonly https://www.googleapis.com/auth/userinfo.email https://www.googleapis.com/auth/cloud-identity.groups https://www.googleapis.com/auth/admin.directory.orgunit https://www.googleapis.com/auth/admin.directory.resource.calendar https://www.googleapis.com/auth/admin.contact.delegation https://www.googleapis.com/auth/chrome.management.policy https://www.googleapis.com/auth/chrome.management.reports.readonly https://www.googleapis.com/auth/admin.chrome.printers https://www.googleapis.com/auth/cloud-identity.userinvitations https://www.googleapis.com/auth/admin.directory.domain https://www.googleapis.com/auth/classroom.rosters https://www.googleapis.com/auth/admin.directory.user https://www.googleapis.com/auth/admin.directory.device.chromeos https://www.googleapis.com/auth/ediscovery https://www.googleapis.com/auth/admin.directory.customer https://www.googleapis.com/auth/siteverification https://www.googleapis.com/auth/classroom.profile.emails https://www.googleapis.com/auth/classroom.profile.photos https://www.googleapis.com/auth/apps.licensing https://www.googleapis.com/auth/cloud-identity.inboundsso https://www.googleapis.com/auth/apps.groups.settings https://www.googleapis.com/auth/admin.directory.device.chromebrowsers https://www.googleapis.com/auth/cloud-identity.orgunits https://www.googleapis.com/auth/admin.directory.userschema https://www.googleapis.com/auth/classroom.guardianlinks.students https://www.googleapis.com/auth/admin.directory.group https://www.googleapis.com/auth/admin.reports.audit.readonly https://www.googleapis.com/auth/admin.directory.rolemanagement https://www.googleapis.com/auth/admin.datatransfer openid

[Jay Lee]

See:

https://support.google.com/a/answer/7281227?hl=en

Jay

--
You received this message because you are subscribed to the Google Groups "GAM for Google Workspace" group.
To unsubscribe from this group and stop receiving emails from it, send an email to google-apps-man...@googlegroups.com.
To view this discussion on the web visit https://groups.google.com/d/msgid/google-apps-manager/2d77f577-5aa6-4a2c-a60a-cf857fec6318n%40googlegroups.com.