"Request had insufficient authentication scopes."

6,922 views
Skip to first unread message

kwoest

unread,
Feb 16, 2018, 5:24:10 PM2/16/18
to GAM for G Suite
Hello. 

I just updated to 4.40 successfully on my Mac (10.11.6). When I type 
gam print vaultholds todrive

I get the error
ERROR: 403: Request had insufficient authentication scopes. - forbidden

I assume this to be an error regarding OAuth. Perhaps I need to add another scope?

So I run gam oauth info and get
Scopes (28):
  https://apps-apis.google.com/a/feeds/emailsettings/2.0/
  https://www.googleapis.com/auth/admin.datatransfer
  https://www.googleapis.com/auth/admin.directory.customer
  https://www.googleapis.com/auth/admin.directory.device.chromeos
  https://www.googleapis.com/auth/admin.directory.device.mobile
  https://www.googleapis.com/auth/admin.directory.domain
  https://www.googleapis.com/auth/admin.directory.group
  https://www.googleapis.com/auth/admin.directory.notifications
  https://www.googleapis.com/auth/admin.directory.orgunit
  https://www.googleapis.com/auth/admin.directory.resource.calendar
  https://www.googleapis.com/auth/admin.directory.rolemanagement
  https://www.googleapis.com/auth/admin.directory.user
  https://www.googleapis.com/auth/admin.directory.user.security
  https://www.googleapis.com/auth/admin.directory.userschema
  https://www.googleapis.com/auth/admin.reports.audit.readonly
  https://www.googleapis.com/auth/admin.reports.usage.readonly
  https://www.googleapis.com/auth/apps.groups.settings
  https://www.googleapis.com/auth/apps.licensing
  https://www.googleapis.com/auth/apps.order
  https://www.googleapis.com/auth/classroom.courses
  https://www.googleapis.com/auth/classroom.guardianlinks.students
  https://www.googleapis.com/auth/classroom.profile.emails
  https://www.googleapis.com/auth/classroom.profile.photos
  https://www.googleapis.com/auth/classroom.rosters
  https://www.googleapis.com/auth/cloudprint
  https://www.googleapis.com/auth/plus.me
  https://www.googleapis.com/auth/siteverification
  https://www.googleapis.com/auth/userinfo.email

Two questions: 
1. Is it obvious which (if any) scope I'm missing because I can't tell? I'm not finding documentation that indicates what is necessary for the vaultholds command to function. I reviewed the CreatingClientsSecretFile and OAuthKeyManagement documentation with no luck.
2. To fix this, will I have to revoke my current auth and create a new project? I'm asking because I need to plan for gam to be out of order. Shouldn't take long but want to anticipate any issues if possible.

Thanks for the help! Great product!

Ross Scroggs

unread,
Feb 16, 2018, 5:36:53 PM2/16/18
to google-ap...@googlegroups.com
Kathleen,

In terminal, do the following, if you're given instructions on any step, follow them
Change to directory where gam executable is located: cd /path/to/GAM
Update project to make sure that Vault API is enabled: gam update project
Backup current oauth2.txt: mv oauth2.txt oauth2.sav
Create new oauth2.txt, enter number for Vault API (should be 23) so the entry is marked *, then do c to continue: gam oauth create

You should be good to go.

Ross

--
You received this message because you are subscribed to the Google Groups "GAM for G Suite" group.
To unsubscribe from this group and stop receiving emails from it, send an email to google-apps-manager+unsub...@googlegroups.com.
To post to this group, send email to google-apps-manager@googlegroups.com.
Visit this group at https://groups.google.com/group/google-apps-manager.
To view this discussion on the web visit https://groups.google.com/d/msgid/google-apps-manager/f370589e-640d-4596-a415-31a3b397c306%40googlegroups.com.
For more options, visit https://groups.google.com/d/optout.



--

Kathleen Woestehoff

unread,
Feb 16, 2018, 6:35:50 PM2/16/18
to google-ap...@googlegroups.com
Terrific. I’ll give that a shot. 

To unsubscribe from this group and stop receiving emails from it, send an email to google-apps-man...@googlegroups.com.

To post to this group, send email to google-ap...@googlegroups.com.



--

--
You received this message because you are subscribed to a topic in the Google Groups "GAM for G Suite" group.
To unsubscribe from this topic, visit https://groups.google.com/d/topic/google-apps-manager/gSNI_ZeInrE/unsubscribe.
To unsubscribe from this group and all its topics, send an email to google-apps-man...@googlegroups.com.
To post to this group, send email to google-ap...@googlegroups.com.

For more options, visit https://groups.google.com/d/optout.
--
Kathleen Woestehoff
Principal Architect, End User Services
E kathleen....@hbc.com 
O 646-802-4235
M 646-271-4628

Hudson's Bay Company
250 Vesey Street, New York NY 10080

Woestehoff, Kathleen

unread,
Feb 18, 2018, 9:18:53 PM2/18/18
to google-ap...@googlegroups.com
This worked flawlessly. Thank you so much, Ross! Excellent service as per always. Have a great night.

Kathleen Woestehoff
Principal Architect, End User Services
E kathleen....@hbc.com 
O 646-802-4235
M 646-271-4628

Hudson's Bay Company
250 Vesey Street, New York NY 10080

To unsubscribe from this group and stop receiving emails from it, send an email to google-apps-manager+unsub...@googlegroups.com.

To post to this group, send email to google-apps-manager@googlegroups.com.



--

--
You received this message because you are subscribed to a topic in the Google Groups "GAM for G Suite" group.
To unsubscribe from this topic, visit https://groups.google.com/d/topic/google-apps-manager/gSNI_ZeInrE/unsubscribe.
To unsubscribe from this group and all its topics, send an email to google-apps-manager+unsub...@googlegroups.com.
To post to this group, send email to google-apps-manager@googlegroups.com.

Jennifer Austin

unread,
Sep 23, 2018, 2:38:01 PM9/23/18
to GAM for G Suite
I just want to add that this saved my bacon today. Thank you!
To post to this group, send email to google-ap...@googlegroups.com.



--
Reply all
Reply to author
Forward
0 new messages