Help Requested - API access Denied error.

[Cheryl M]

I have GAMADV-XTD3 6.59.00 installed. Today I am unable to use GAM to perform any actions. Commands that worked normally yesterday, today just returns an error stating "ERROR: API access Denied". I'd really appreciate help with determining the cause and what troubleshooting steps should I take.

Thanks,

Cheryl

Disclaimer:This message contains confidential information and is intended only for the individual named. If you are not the named addressee you should not disseminate, distribute or copy this e-mail. Please notify the sender immediately by e-mail if you have received this e-mail by mistake and delete this e-mail from your system. Please note that any views or opinions presented in this email are solely those of the author and do not necessarily represent those of SETA or A.A. as a whole. E-mail transmission cannot be guaranteed to be secure or error-free as information could be intercepted, corrupted, lost, destroyed, arrive late or incomplete, or contain viruses. The sender therefore does not accept liability for any errors or omissions in the contents of this message, which arise as a result of e-mail transmission. If verification is required please request a hard-copy version.

[Keith R]

We are also getting this today.  Regular GAM is getting google.auth.exceptions.RefreshError: ('internal_failure: None', {'error': 'internal_failure'}) and GAMADV-XTD3 is getting ERROR: API access Denied.

[Jennifer Smith]

Same here, on both GAM and GAMADV-XTD3. Poking around in google cloud hasn't caused enlightenment yet.

[Craig Millsap]

I am seeing this in multiple Educational and Non Profit Workspaces.  I'm using GAM Advanced, multiple versions, same error.

Thanks,

Craig

On Wednesday, April 10, 2024 at 9:08:45 AM UTC-5 Keith R wrote:

[Luis Melendez]

Have you tried running the command 

gam oauth create

That should work , but we are not getting that to work either on out end we get and ERROR: 9internal_failure)

On Wednesday, April 10, 2024 at 8:42:33 AM UTC-5 Cheryl M wrote:

[Cheryl M]

I discovered I am also unable to create a Google Workspace User in the Admin panel.  Hmm....

[Jay Lee]

This seems to be a Google server-side issue:

- Please open a support case and reference "Google Internal Issue 333707934"

- Please mention that you are using GAM to call the Admin SDK API and that this was working up until yesterday.

Jay Lee

On Wed, Apr 10, 2024 at 10:36 AM Craig Millsap <cr...@camtechcs.com> wrote:

Also seeing this across multiple Education and Non Profit workspace accounts.

On Wednesday, April 10, 2024 at 9:08:45 AM UTC-5 Keith R wrote:

--
You received this message because you are subscribed to the Google Groups "GAM for Google Workspace" group.
To unsubscribe from this group and stop receiving emails from it, send an email to google-apps-man...@googlegroups.com.
To view this discussion on the web visit https://groups.google.com/d/msgid/google-apps-manager/ebd500cc-b39d-4645-99d8-329a17c65cbdn%40googlegroups.com.

[Cheryl M]

Yes, I tried,  the auth also failed with an "internal error" message.  I've now discovered I can't create a user in the admin panel either so I think my issue is more that a GAM error.

Thanks for the suggestion!

Cheryl

On Wednesday, April 10, 2024 at 9:36:58 AM UTC-5 Luis Melendez wrote:

[Walt Surovik]

GAM was working prior to 6:45 CST this morning.

At least trying to narrow the time it stopped working.

Children First. Always.

Walt

-------------------------------------
Walt Surovik
Systems Administrator 
Bryan ISD
979.209.1179

Excellence is to do a common thing in an uncommon way.

~ Booker T. Washington

To view this discussion on the web visit https://groups.google.com/d/msgid/google-apps-manager/CA%2BVVBp-yBWR-Tdasmo6r-6sR0Z9xoT894E1t%2B9L59p%2BfXXi%2BBQ%40mail.gmail.com.

[Jennifer Smith]

I'm entering a case now as requested.

I've got monitoring on a regular GAM job, and it says it has been down for 12hr at this point (so 10:11PM central time last night)

[Keith R]

Opened ticket as Jay Lee requested.

Did that here:   Google Cloud Support

[Jay Lee]

I am no longer able to reproduce these errors. If you are still seeing errors please let me know here.

Jay Lee

To view this discussion on the web visit https://groups.google.com/d/msgid/google-apps-manager/ff70b516-2356-43de-8ad2-23ef7b88f77dn%40googlegroups.com.

[Keith R]

No change on my end, still broken.

[Jay Lee]

I'll need more details than that. Did you try "gam oauth revoke" "gam oauth create" ?

Jay Lee

To view this discussion on the web visit https://groups.google.com/d/msgid/google-apps-manager/3a00aaed-15e7-4048-ae7a-886a1e6a9e50n%40googlegroups.com.

[✉ Kevin Melillo]

Just wanted to chime in that GAM is working as expected over here from the Cloud Shell.  

To view this discussion on the web visit https://groups.google.com/d/msgid/google-apps-manager/CA%2BVVBp-4RNxxsvA9rSVzKtvviQAX%2BgBLoSiCnaep-p%2B2yiPxxA%40mail.gmail.com.

[Keith R]

I appreciate your help.  I did the gam oauth revoke and then got the attached screenshot on gam oauth create.

[Maj Marshall Giguere]

Cheryl

Same here.  All advanced gam commands I try return "ERROR: API Access Denied".  Fortunately I was able to login to the admin console.

Maj Marshall E Giguere
NH Wing Director of IT
Civil Air Patrol, U.S. Air Force Auxiliary
(M)  978.842.1547
GoCivilAirPatrol.com
nhwg.cap.gov

Volunteers serving America's communities, saving lives, and shaping futures.

--

You received this message because you are subscribed to the Google Groups "GAM for Google Workspace" group.
To unsubscribe from this group and stop receiving emails from it, send an email to google-apps-man...@googlegroups.com.

To view this discussion on the web visit https://groups.google.com/d/msgid/google-apps-manager/412ae9de-e4bd-4497-bf8e-22c8e4d7898dn%40googlegroups.com.

[Maj Marshall Giguere]

Interestingly when I run commands from my current location in the middle of the US it fails, when I run commands from my NYC VM's they work.  Location related???

Maj Marshall E Giguere
NH Wing Director of IT
Civil Air Patrol, U.S. Air Force Auxiliary
(M)  978.842.1547
GoCivilAirPatrol.com
nhwg.cap.gov

Volunteers serving America's communities, saving lives, and shaping futures.

[Cheryl M]

Just letting you know that I am still getting the same gam error message.   

Cheryl

 

You received this message because you are subscribed to a topic in the Google Groups "GAM for Google Workspace" group.
To unsubscribe from this topic, visit https://groups.google.com/d/topic/google-apps-manager/UjJsEPRM0XI/unsubscribe.
To unsubscribe from this group and all its topics, send an email to google-apps-man...@googlegroups.com.
To view this discussion on the web visit https://groups.google.com/d/msgid/google-apps-manager/CA%2BVVBp8Y3fFdJSuO%3DvYT9X3XiUea-E0w2%3D549ju%3DTfy7Q02-Rw%40mail.gmail.com.

Confidentiality Notice: This email, including any attachments, is for the intended recipient only and may contain confidential information. If you received this in error, please notify the sender and delete it from your system. The sender accepts no liability for errors or omissions arising from email transmission.

[Jay Lee]

Others have reported that they are in a US Central region and using a VPN to another region like US East resolved this issue for them.

I recognize that might be a tall order for many admin but wanted to share the potential workaround for now.

Jay Lee

To view this discussion on the web visit https://groups.google.com/d/msgid/google-apps-manager/CAOnNMdDJLDWNS_DOpRR8V04LyfsZZNv9UzhSyA1HV_PiXCNkjA%40mail.gmail.com.

[Gui Hyppolito]

I appreciate the responses here. Using a VPN to another location (West Coast office) worked for me.

[Christopher Strader]

I will also chime in. my cloud shell instance is working great. however my desktop instance is getting the "ERROR: API access Denied" message.

When attempting to run "gam oauth create" I recieve "The Authentication flow failed (invalid verification code entered?): (Internal_failure)"

I was able to try "Gam oauth revoke" as suggested, however that did not improve results when then running "gam oauth create"

On Wednesday, April 10, 2024 at 1:20:28 PM UTC-5 Jay Lee wrote:

Information contained in this communication is Confidential and is intended only for the use of the individual or entity to which it is addressed. It may contain information that is privileged, confidential, for law enforcement purposes, and exempt from disclosure under applicable law. If you are not the intended recipient, you are hereby notified that you are not authorized to read, review, distribute or duplicate the information contained herein, and that any disclosure, distribution or duplication is strictly prohibited. If you have received this information in error, please notify the sender immediately at the above address.

OPEN RECORDS NOTICE: This email and responses may be subject to Texas Open Records laws and may be disclosed to the public upon request. Please respond accordingly.

[Robert Rangel]

I deleted and rebuilt GAM to the latest.  Good to know it's not on our end.

[Cheryl M]

Using a VPN to Miami worked for me.  Thanks for the workaround.

Cheryl

[Maj Marshall Giguere]

What's interesting is that if I run a command through a tunnel/VPN I can run the next commands without the tunnel/VPN.  If I don't do anything for around 30-50 minutes I have to go through the whole  tunnel/VPN subterfuge again.

To view this discussion on the web visit https://groups.google.com/d/msgid/google-apps-manager/1631c3a5-a4cb-42a4-bb4b-36c4995dc72fn%40googlegroups.com.

[Jay Lee]

Could anyone who's seen the issue try again and report back if it's fixed or not for them now?

Jay

To view this discussion on the web visit https://groups.google.com/d/msgid/google-apps-manager/CADSK1vvwZEpRdokz9rzdEaH8wy07-ObDmEzKrnLAFDcb5BO1YA%40mail.gmail.com.

[Cheryl M]

It's working for me now.

To view this discussion on the web visit https://groups.google.com/d/msgid/google-apps-manager/CA%2BVVBp-fDOppYENBSL5d2GuGPZDOtZ9RsppVxunz7uaogci93g%40mail.gmail.com.

[Maj Marshall Giguere]

Jay;

It appears to be working again from my location in central US.  I will retest in a few hours.

To view this discussion on the web visit https://groups.google.com/d/msgid/google-apps-manager/CA%2BVVBp-fDOppYENBSL5d2GuGPZDOtZ9RsppVxunz7uaogci93g%40mail.gmail.com.

[Christopher Strader]

I appear to be working now with no issues from Central US.

[Keith R]

Yep, looks good.  Thanks Jay.

[Chris Iuchs]

same, working here