Issues with GAM setup

[Val]

Hi,

I'm having trouble setting GAM with a service account. 

Context:

• My request for a dedicated GCP project for GAM was denied. Instead a service account was provided to me located in an existing GCP project
• The service account is tied to a Google group (which I'm a part of) with service key admin access
• I created a service account key per KB article (https://cloud.google.com/iam/docs/keys-create-delete)
• I configured domain wide delegation with the client ID generated in the service account key JSON file
• Installed GAM
• Moved the service key JSON file to the GAM directory
• Verified with the team that manages the GCP project and service account that it has Admin SDK API and Reports API

Despite all the steps taken, I'm running into a permissions issue with the service account. 

'service account' does not have permission to access projects instance [abc-defg] (or it may not exist): The caller does not have permission. This command is authenticated as 'service account' which is the active account specified by the [core/account] property

Not sure what I'm missing. Any help would be greatly appreciated.

Thanks,

Val

[Ross Scroggs]

Send me a Meet/Zoom invitation and I'll help.

Ross

----

Ross Scroggs

Ross.S...@gmail.com

--
You received this message because you are subscribed to the Google Groups "GAM for Google Workspace" group.
To unsubscribe from this group and stop receiving emails from it, send an email to google-apps-man...@googlegroups.com.
To view this discussion on the web visit https://groups.google.com/d/msgid/google-apps-manager/c6e8ec2f-fcbc-4f98-98b2-5024d9ee1c1dn%40googlegroups.com.

[Valentin Wong]

Great thanks Ross. Got us scheduled for tomorrow afternoon 4:30pm ET

To view this discussion on the web visit https://groups.google.com/d/msgid/google-apps-manager/307CA583-42DA-4D1D-AC73-47E531D045EC%40gmail.com.