Restoring to Vault

[Priya Chandra]

Hi everyone - I'm sure this is a simple question and so apologies in advance.

Essentially I have a .mbox file from Google Workspace Vault A (easily downloaded via Vault export, yay!). Now I need to upload it to Google Workspace Vault B (bypassing the user's regular inbox as they don't want to see the messages, just have them in vault).

So, set up GYB as per normal and tried the following:

gyb --email user@account --action restore-mbox --local-folder "C:\Users\path\name" --service-account --vault

and got 

google.auth.exceptions.RefreshError: ('unauthorized_client: Client is unauthorized to retrieve access tokens using this method, or client not authorized for any of the scopes requested.', {'error': 'unauthorized_client', 'error_description': 'Client is unauthorized to retrieve access tokens using this method, or client not authorized for any of the scopes requested.'})

So I'm asusming I need to add a new auth to my domain wide delegation butI don't know what it should be! As I said, it's an easy question I'm sure for more experienced people than me!

Cheers,

Priya