Trouble with "Calendar API Service/App not enabled"

[Hans Otto Lunde]

I have trouble giving newly created users access to an existing calendar.

After creating the user and adding it to a group I give it access to a calendar like this:

(CAL_ID is of course the real-long calendar-id)

First step -creating the user etc, all is fine... then

gam calendars CAL_ID add acls reader te...@egmont-hs.dk sendnotifications false

This also goes fine - now I want to make the calendar visible for the user

gam user te...@egmont-hs.dk add calendars CAL_ID selected true

Here I often get this "Calendar API Service/App not enabled" - but not always

Is this a timing issue?

A chatbot suggested something on the line of:

Until late 2024 Google always created a user’s “primary calendar” immediately when the account was provisioned. Around November 2024 the Calendar back-end was changed:
Primary-calendar creation is now lazy
– it happens the first time the Calendar API is touched for that user, or the first time the user opens calendar.google.com.

Is this right?

I tried inserting something like

gam user te...@egmont-hs.dk show calsettings timezone

BEFORE giving the user access to the shared calendar to somehow initializing the users  calendar-api - but this doen't really work either

This used to work fine about 6 months ago, as I recall.

Can anyone enlighten me about what is going on?

Hans Otto Lunde

[Hans Otto Lunde]

I forgot to mention that I run GAM version 7.09.05 and my check serviceaccout looks like this:

System time status
  Your system time differs from admin.googleapis.com by less than 1 second  PASS
Service Account Private Key Authentication
  Authentication                                                            PASS
Service Account Private Key age; Google recommends rotating keys on a routine basis
  Service Account Private Key age: 0 days                                   PASS
Domain-wide Delegation authentication:, User: ***********@egmont-hs.dk, Scopes: 36
  https://mail.google.com/                                                  PASS (1/36)
  https://www.googleapis.com/auth/analytics.readonly                        PASS (2/36)
  https://www.googleapis.com/auth/apps.alerts                               PASS (3/36)
  https://www.googleapis.com/auth/calendar                                  PASS (4/36)
  https://www.googleapis.com/auth/chat.admin.delete                         PASS (5/36)
  https://www.googleapis.com/auth/chat.admin.memberships                    PASS (6/36)
  https://www.googleapis.com/auth/chat.admin.spaces                         PASS (7/36)
  https://www.googleapis.com/auth/chat.delete                               PASS (8/36)
  https://www.googleapis.com/auth/chat.memberships                          PASS (9/36)
  https://www.googleapis.com/auth/chat.messages                             PASS (10/36)
  https://www.googleapis.com/auth/chat.spaces                               PASS (11/36)
  https://www.googleapis.com/auth/classroom.announcements                   PASS (12/36)
  https://www.googleapis.com/auth/classroom.coursework.students             PASS (13/36)
  https://www.googleapis.com/auth/classroom.courseworkmaterials             PASS (14/36)
  https://www.googleapis.com/auth/classroom.profile.emails                  PASS (15/36)
  https://www.googleapis.com/auth/classroom.profile.photos                  PASS (16/36)
  https://www.googleapis.com/auth/classroom.rosters                         PASS (17/36)
  https://www.googleapis.com/auth/classroom.topics                          PASS (18/36)
  https://www.googleapis.com/auth/cloud-identity.devices                    PASS (19/36)
  https://www.googleapis.com/auth/contacts                                  PASS (20/36)
  https://www.googleapis.com/auth/contacts.other.readonly                   PASS (21/36)
  https://www.googleapis.com/auth/datastudio                                PASS (22/36)
  https://www.googleapis.com/auth/directory.readonly                        PASS (23/36)
  https://www.googleapis.com/auth/documents                                 PASS (24/36)
  https://www.googleapis.com/auth/drive                                     PASS (25/36)
  https://www.googleapis.com/auth/drive.activity                            PASS (26/36)
  https://www.googleapis.com/auth/drive.admin.labels                        PASS (27/36)
  https://www.googleapis.com/auth/drive.labels                              PASS (28/36)
  https://www.googleapis.com/auth/gmail.modify                              PASS (29/36)
  https://www.googleapis.com/auth/gmail.settings.basic                      PASS (30/36)
  https://www.googleapis.com/auth/gmail.settings.sharing                    PASS (31/36)
  https://www.googleapis.com/auth/keep                                      PASS (32/36)
  https://www.googleapis.com/auth/meetings.space.created                    PASS (33/36)
  https://www.googleapis.com/auth/spreadsheets                              PASS (34/36)
  https://www.googleapis.com/auth/tasks                                     PASS (35/36)
  https://www.googleapis.com/auth/userinfo.profile                          PASS (36/36)
Deprecated scopes that GAM should NEVER have DwD access to:, User: *************@egmont-hs.dk, Scopes: 3
  https://www.googleapis.com/auth/cloud-identity                            PASS (1/3)
  https://www.googleapis.com/auth/cloud-platform                            PASS (2/3)
  https://www.googleapis.com/auth/iam                                       PASS (3/3)
All scopes PASSED!

Service Account Client name: ******* is fully authorized.