Error 403 When applying delegate access to specific user.

[Joe Cross]

I am trying to delegate access to a mailbox to multiple users. The script works for all the users except for 1.

The one user that is having issues is a super admin and is also the default admin for the account. Just for troubleshooting purposes I have tested removing him as default admin and as super admin and still get nothing. The account I am using in GAM is a super admin account as well so I know that isn't the problem. One of the other users I am delegating access to is also a super admin and the delegation work perfectly for him. I am not sure what the issue is. Every time I try and delegate to the user with the problem it returns this: "Error 403: Not authorized to access this resource/api - forbidden"

Any help is appreciated.

[Graham Ingleby]

I dont have a definite answer, but, the Wiki page states:

The delegate and the delegator must be in the same domain, granting delegate access across multiple domains is currently not possible.

Both the Gmail delegator and the delegate:

• Must be active. A 500 error is returned if either user is suspended and disabled.
  
• Must not require a change of password on the next sign in. A 500 error is returned if either user has this flag enabled in the control panel, or, using the Provisioning API, the changePasswordAtNextLogin attribute is true.

you can confirm these settings using the gam info user command. Both "Account suspended" and "Must change password" should show false for both the delegate and the delegator.

I know this is a different error to what you see, but it would be worth doing the gam info user on the problem account to see if any flags are set that you didnt expect or anything else shows up

 

Graham Ingleby |

Cloud Computing Consultant |

01344 203395 |

ging...@ancoris.com

  

--
You received this message because you are subscribed to the Google Groups "Google Apps Manager" group.
To unsubscribe from this group and stop receiving emails from it, send an email to google-apps-man...@googlegroups.com.
To post to this group, send email to google-ap...@googlegroups.com.
Visit this group at http://groups.google.com/group/google-apps-manager.
To view this discussion on the web visit https://groups.google.com/d/msgid/google-apps-manager/cacc1c78-3ce6-4bb6-945b-37ecd7fd0b2f%40googlegroups.com.
For more options, visit https://groups.google.com/d/optout.

This message is for the named person's use only.  If you receive this message in error, please delete it and notify the sender.  Ancoris reserves the right to monitor all e-mail communications through its networks. Ancoris Limited, Registered in England Number: 04830784, Registered address: 5a Frascati Way, Maidenhead, Berkshire SL6 4UY. Trading Address: Lily Hill House, Lily Hill Road, Bracknell, Berkshire RG12 2SJ