Issue with enabling Drive API

Nathan Rogers

unread,

Dec 30, 2024, 7:57:43 PM12/30/24

to GAM for Google Workspace

Hi all

I use GAM with a number of different domains but for some reason I'm having some issues with one domain in particular. As an example, when attempting to transfer ownership of a file I'm getting "User: us...@domain.com, Drive API v3 Service/App not enabled".

I've gone through the setup a few times thinking I must have missed a step but so far not having any luck tracking down the issue. Anyone have any advice on how to troubleshoot?

Ross Scroggs

unread,

Dec 30, 2024, 8:08:57 PM12/30/24

to google-ap...@googlegroups.com

What is: gam version

Do: gam user us...@domain.com update serviceaccount

I'm in California (GMT-8) and am available now if you'd like to Zoom/Meet, othewise I'm available start at 7:30AM

Ross

----

Ross Scroggs

Ross.S...@gmail.com

--
You received this message because you are subscribed to the Google Groups "GAM for Google Workspace" group.
To unsubscribe from this group and stop receiving emails from it, send an email to google-apps-man...@googlegroups.com.
To view this discussion visit https://groups.google.com/d/msgid/google-apps-manager/05d2a9fd-aa1e-402b-8e8f-35fc2f40a56bn%40googlegroups.com.

Ashish Jain

unread,

Jan 9, 2025, 7:26:59 AM1/9/25

to GAM for Google Workspace

Facing similar issue. I ran gam user us...@domain.com update serviceaccount but the Drive API - todrive is already selected. Infact, all scopes are already selected. I am using GAMADV-XTD3 7.02.07

Ross Scroggs

unread,

Jan 9, 2025, 10:31:32 AM1/9/25

to google-ap...@googlegroups.com

21) Drive API - todrive is only used when 20) Drive API (supports readonly) is unselected or readonly.

This allows the user to do "redirect csv - todrive" but not to manipulate user's drive files.

Show your command and error message.

Send me a Meet/Zoom invitation if you need help

Ross

----

Ross Scroggs

Ross.S...@gmail.com

To view this discussion visit https://groups.google.com/d/msgid/google-apps-manager/628e83b6-5526-4d6c-b27b-dc15e9047033n%40googlegroups.com.

Ashish Jain

unread,

Jan 9, 2025, 12:07:45 PM1/9/25

to GAM for Google Workspace

https://meet.google.com/dtx-gnqw-bod

Huang JS (Josh)

unread,

Feb 19, 2025, 5:38:32 AM2/19/25

to GAM for Google Workspace

Hi Ross,

I run the command

m@cloudshell:~ (gam-project-8vq0i)$ ./gam user m@<mydomain> copy drivefile 1Xyz3N6yecS4xMFx-MoMJDAviabPoQGqS parentid 1r3TVvxY0yqHfrUFe54eZju2WfrG6A78f

but showed with the error:
User: m@<mydomain>, Drive API v3 Service/App not enabled

The API for my SA is with: (by ./gam user m@ <mydomain> update serviceaccount)
[*] 20) Drive API (supports readonly)
[*] 21) Drive API - todrive

Would you please help to solve my question?
Thanks！

Ross Scroggs

unread,

Feb 19, 2025, 10:25:56 AM2/19/25

to google-ap...@googlegroups.com

Do: gam user m@mydomain update serviceaccount

Ross

----

Ross Scroggs

Ross.S...@gmail.com

To view this discussion visit https://groups.google.com/d/msgid/google-apps-manager/9cc9419c-259d-48fd-a313-4ee7d3dc119cn%40googlegroups.com.

Melyani Nurhalimah Sembiring

unread,

Feb 20, 2025, 9:55:59 AM2/20/25

to GAM for Google Workspace

Hello all, currently I'm facing similar issue when i tried running gam with superadmin account :

linux:~$ gam user user...@<domain> print filelist id miniumfilesize 262144000 fields filesize,id,name todrive

user: user...@<domain>,Drive API v3 Service/App not enabled

user: <superadmin>@<domain>,Drive API v3 Service/App not enabled

There's no problem when I run other gam commands (e.g. print user list, update users data, etc), but when I tried to run command related to Drive it failed.

I already checked that the drive API already enabled on the console, but when I did the auth process the Drive not listed on the permission list

(I'm using GAMADV-XTD 7.03.04)

kindly need advice on how to solve this,

thanks :)

Ross Scroggs

unread,

Feb 20, 2025, 10:14:34 AM2/20/25

to google-ap...@googlegroups.com

Do: gam user user#domain.com update serviceaccount

Ross

----

Ross Scroggs

Ross.S...@gmail.com

To view this discussion visit https://groups.google.com/d/msgid/google-apps-manager/e4789e7f-bdb8-4f36-bf84-cbaa9aa99b43n%40googlegroups.com.

Anthony Santoro

unread,

Apr 11, 2025, 2:24:05 PM4/11/25

to GAM for Google Workspace

Sorry to gravedig this, but I'm running into a similar issue

GAM version is 7.06.01
Whenever I run a command that would utilize the Drive API I get a message "User: u...@domain.com, Drive Service/App not enabled".
I tried running the "gam user u...@domain.com update serviceaccount" but it shows all the default services are enabled and show "PASS".

Any help is appreciated!

Jay Lee

unread,

Apr 11, 2025, 2:29:15 PM4/11/25

to google-ap...@googlegroups.com

Did you confirm the user has a license that grants them Google Drive (usually a Workspace license) and that Drive is enabled for the user's OrgUnit in admin console? Can the user login and access Google Drive themselves?

Jay Lee

To view this discussion visit https://groups.google.com/d/msgid/google-apps-manager/93d5fc73-9563-462a-be30-12ad4347aeb3n%40googlegroups.com.

Anthony Santoro

unread,

Apr 11, 2025, 2:59:41 PM4/11/25

to GAM for Google Workspace

Figured this out with the help of Ross!

When debugging why drive service calls weren't working, we were presented with a "'The domain administrators have disabled Drive apps.'" message.

Everything was correct on the end of the services being enabled, but it turns out "Drive SDK" was turned off for my domain.

Going into "Apps > Google Workspace > Settings for Drive and Docs > Features and Applications" I was able to enable "Drive SDK" and that resolved the issue.

This is a link to another person with the same issue, if this helps anyone: https://groups.google.com/g/google-apps-manager/c/SV-Bu2fiaW8

Not sure how that got toggled off, but a investigation doesn't show any Super Admin having turned it off.. so I'll just take the win.

Thanks Ross!

David Vielmetter

unread,

Jul 17, 2025, 3:03:15 PM7/17/25

to GAM for Google Workspace

I'm also seeing the message about Drive API v3 Service App not enabled but when I do a update service account both 20 and 21 already have stars. I have the SDK turned on for the domain. Any other suggestions on what I'm missing? Trying to do a list of shared drive permissions also.

Ross Scroggs

unread,

Jul 17, 2025, 3:06:50 PM7/17/25

to google-ap...@googlegroups.com

Send me a private Meet/Zoom invitation and i'll help.

Ross

----

Ross Scroggs

Ross.S...@gmail.com

To view this discussion visit https://groups.google.com/d/msgid/google-apps-manager/9fefd7dc-d7ed-466a-8dba-cdbe387a6243n%40googlegroups.com.

Russ Thibeault

unread,

Jul 21, 2025, 4:10:27 PM7/21/25

to GAM for Google Workspace

I just had this same issue as well and resolved it using the :

gam user us...@domain.com update serviceaccount

and continuing through the re-authentication. If you see "Some scopes FAILED or should be DISABLED!
To update authorization, please go to the following link in your browser:", make sure to follow the instructions to Authorize the new Client ID.

Good luck and thank you all for the support.

David Vielmetter

unread,

Jul 22, 2025, 12:42:45 PM7/22/25

to GAM for Google Workspace

Thanks again for the assist Russ! Worked perfectly.

Jason Harris

unread,

Aug 18, 2025, 2:39:55 PM8/18/25

to GAM for Google Workspace

I seem to be having the same issue with the Drive API with the message "Drive Service/App not enabled" Any thoughts, here is what I've done so far based on this thread.

Jason

Drive SDK is enabled at our root and I confirmed it's inheritted to the account I use with GAM as well as the accounts I was targeting for changing some ownership/moving files.

- Turned it off for a few minutes and then back on

Updated GAM to the latest version 7.18.06

Updated the service account (Multiple times) everything passes, though I have a warning on the private key being 54 days old.

System time status
Your system time differs from admin.googleapis.com by less than 1 second PASS
Service Account Private Key Authentication
Authentication PASS
Service Account Private Key age; Google recommends rotating keys on a routine basis
Service Account Private Key age: 54 days WARN
Domain-wide Delegation authentication:, User: <us. 
Deprecated scopes that GAM should NEVER have DwD access to:, User: <us...@domain.com>, Scopes: 3
https://www.googleapis.com/auth/cloud-identity PASS (1/3)
https://www.googleapis.com/auth/cloud-platform PASS (2/3)
https://www.googleapis.com/auth/iam PASS (3/3)
All scopes PASSED!

Jason Harris

unread,

Aug 19, 2025, 6:32:51 PM8/19/25

to GAM for Google Workspace

Thanks, Ross!

In case it helps anyone else.

In this case the file we were trying to maniupulate belonged to a user that was in their own OU with the entire Drive service disabled.

Commands used for troubleshooting.

gam user targe...@domain.com show drivesettings

gam user myu...@domain.com show drivesettings.

Running these commands resulted in the Drive Service/App not enabled for the target user but spit out some data for my own user.

gam info user targe...@domain.com to confirm the OU and then just checking the admin console.

Jason

Reply all

Reply to author

Forward