gam user <my-email> check serviceaccount fails 28/28

[Brad Fears]

I am using the latest version of GAMADV-XTD3 (6.32.02, downloaded today), and I am a Super Admin in our workspace.

When I run: gam user <my-email> check serviceaccount

It shows FAIL on all 28.  However, when I use the email address of the service account, it passes 27 of the checks.

My goal is to run:

gam user <users-email> show filelist

Which is interesting, since I can substitute the service account's email address and it returns what I would expect "Got 0 Drive Files/Folders that matched query..."

Any advice would be appreciated!

P.S. gam info domain and gam info user <email> both work fine, if that helps.

Thanks,

Brad

[Jay Lee]

When check service account fails it provides you with a URL that you must visit in order to add the domain -wide delegation permissions the service account needs. Have you done that? Did you wait an hour or so afterwards to make sure the setting propagated?

Jay

--
You received this message because you are subscribed to the Google Groups "GAM for Google Workspace" group.
To unsubscribe from this group and stop receiving emails from it, send an email to google-apps-man...@googlegroups.com.
To view this discussion on the web visit https://groups.google.com/d/msgid/google-apps-manager/22b47248-e5df-48a0-8e9a-bf8dd88e6a72n%40googlegroups.com.

[Brad Fears]

Yes, I tried several times this morning, including reinstalling GAM a few times.  It did provide me with the URL for setting up domain-wide delegation, so I followed the instructions to complete that.  And I have a third-party app configured in Workspace -> Security -> API Controls -> App Access Control.