If you need help with GAM, please do not file an issue here, it will be closed and ignored.

Please post your question to the GAM discussion group where other admins are ready and willing to help:

https://groups.google.com/g/google-apps-manager

The user can do a gam info user but can not do a gam user bthomas sendas rflask "Bob Thomas"

he gets this error message ERROR: User email address: unauthorized_client: Client is unauthorized to retrieve access tokens using this method, or client not authorized for any of the scopes requested.

How do I fix this?

What does this show:

gam user bthomas check serviceaccount

Ross

On Wed, Jul 27, 2022 at 4:45 AM mtwillis1965 @.***> wrote:

The user can do a gam info user but can not do a gam user bthomas sendas rflask "Bob Thomas"

he gets this error message ERROR: User e https://groups.google.com/mail address: unauthorized_client: Client is unauthorized to retrieve access tokens using this method, or client not authorized for any of the scopes requested.

How do I fix this?

— Reply to this email directly, view it on GitHub https://github.com/GAM-team/GAM/issues/1546#issuecomment-1196622193, or unsubscribe https://github.com/notifications/unsubscribe-auth/ACCTYL4GQH7YKNG7CG3ZEX3VWEOOTANCNFSM54ZJLDAA . You are receiving this because you are subscribed to this thread.Message ID: @.***>

-- Ross Scroggs @.***

Good Morning Ross,

So it took so long to get back to you.

Here is what the user got?

mac-D25Y5093J1GP:~ cverrill$ gam user bthomas check serviceaccount Version Check: Current: 6.21 Latest: 6.22

GAM 6.22 release notes:

Workaround Google bug that prevents large domains from printing devices

1534

Allow super admins to delete any shared drive (Ross) Add address fields to buildings (Ross) -Various other fixes and improvements by Ross and Jay

Hit CTRL+C to visit the GAM website and download the latest release or wait 15 seconds continue with this boring old version. GAM won't bother you with this announcement for 1 week or you can create a file named noupdatecheck.txt in the same location as gam.py or gam.exe and GAM won't ever check for updates. Computer clock status: Your system time differs from admin.googleapis.com by less than 1 second PASS Service Account Private Key Authentication: Authenticating... PASS Checking key age. Google recommends rotating keys on a routine basis... Key is 14 days old PASS Domain-Wide Delegation authentication as @.***: https://mail.google.com/ FAIL https://www.googleapis.com/auth/apps.alerts FAIL https://www.googleapis.com/auth/calendar FAIL https://www.googleapis.com/auth/cloud-identity FAIL https://www.googleapis.com/auth/drive FAIL https://www.googleapis.com/auth/drive.activity FAIL https://www.googleapis.com/auth/gmail.settings.basic FAIL https://www.googleapis.com/auth/gmail.settings.sharing FAIL https://www.googleapis.com/auth/spreadsheets FAIL

ERROR: Some scopes failed! To authorize them, please go to:

https://gam-shortn.appspot.com/6d7kp9

You will be directed to the Google Workspace admin console Security/API Controls/Domain-wide Delegation page The "Add a new Client ID" box will open Make sure that "Overwrite existing client ID" is checked Please click Authorize to allow these scopes access. After authorizing it may take some time for this test to pass so go grab a cup of coffee and then try this command again.

How do we get to Google Workspace admin console Security/API Controls/Domain-wide Delegation page?

Thanks

Mark Willis, PMP Senior IT Project Manager School District of Philadelphia (215) 400-5031

https://api.accredible.com/v1/frontend/credential_website_embed_image/badge/36561610?key=522b60e90633bda83a700ed65361e07eccbdb2272e18993024bfcdfd435ecfd2

*Click *here https://philasd.co1.qualtrics.com/jfe/form/SV_6SiweqqjqE7deT3?Source=EMAILIT&Office=Office%20of%20Information%20Technology%20and%20Data%20Management https://philasd.co1.qualtrics.com/jfe/form/SV_6SiweqqjqE7deT3?Source=EMAILIT&Office=Office%20of%20Information%20Technology%20and%20Data%20Managementto

tell us how we are doing!

Any Questions? Please call the I.T. Help Desk at 215-400-5555 or email at @. @.>.*

Visit philasd.org/technology http://philasd.org/technology for more information.

Visit sishelp.philasd.org http://sishelp.philasd.org/ for SIS training resources.

On Wed, Jul 27, 2022 at 2:35 PM Ross Scroggs @.***> wrote:

What does this show:

gam user bthomas check serviceaccount

Ross

On Wed, Jul 27, 2022 at 4:45 AM mtwillis1965 @.***> wrote:

The user can do a gam info user but can not do a gam user bthomas sendas rflask "Bob Thomas"

he gets this error message ERROR: User e https://groups.google.com/mail address: unauthorized_client: Client is unauthorized to retrieve access tokens using this method, or client not authorized for any of the scopes requested.

How do I fix this?

— Reply to this email directly, view it on GitHub https://github.com/GAM-team/GAM/issues/1546#issuecomment-1196622193, or unsubscribe < https://github.com/notifications/unsubscribe-auth/ACCTYL4GQH7YKNG7CG3ZEX3VWEOOTANCNFSM54ZJLDAA

. You are receiving this because you are subscribed to this thread.Message ID: @.***>

-- Ross Scroggs @.***

— Reply to this email directly, view it on GitHub https://github.com/GAM-team/GAM/issues/1546#issuecomment-1197215340, or unsubscribe https://github.com/notifications/unsubscribe-auth/AW2TKLTYSAETKY4JQUQKL3DVWF6OLANCNFSM54ZJLDAA . You are receiving this because you authored the thread.Message ID: @.***>

The link: https://gam-shortn.appspot.com/6d7kp9 https://gam-shortn.appspot.com/6d7kp9

will take you to:

Google Workspace admin console Security/API Controls/Domain-wide Delegation page

Ross

-- @.***

On Aug 8, 2022, at 3:20 AM, mtwillis1965 @.***> wrote:

Good Morning Ross,

So it took so long to get back to you.

Here is what the user got?

mac-D25Y5093J1GP:~ cverrill$ gam user bthomas check serviceaccount Version Check: Current: 6.21 Latest: 6.22

GAM 6.22 release notes:

Workaround Google bug that prevents large domains from printing devices

1534

Allow super admins to delete any shared drive (Ross) Add address fields to buildings (Ross) -Various other fixes and improvements by Ross and Jay

Hit CTRL+C to visit the GAM website and download the latest release or wait 15 seconds continue with this boring old version. GAM won't bother you with this announcement for 1 week or you can create a file named noupdatecheck.txt in the same location as gam.py or gam.exe and GAM won't ever check for updates. Computer clock status: Your system time differs from admin.googleapis.com by less than 1 second PASS Service Account Private Key Authentication: Authenticating... PASS Checking key age. Google recommends rotating keys on a routine basis... Key is 14 days old PASS Domain-Wide Delegation authentication as @.***: https://mail.google.com/ FAIL https://www.googleapis.com/auth/apps.alerts FAIL https://www.googleapis.com/auth/calendar FAIL https://www.googleapis.com/auth/cloud-identity FAIL https://www.googleapis.com/auth/drive FAIL https://www.googleapis.com/auth/drive.activity FAIL https://www.googleapis.com/auth/gmail.settings.basic FAIL https://www.googleapis.com/auth/gmail.settings.sharing FAIL https://www.googleapis.com/auth/spreadsheets FAIL

ERROR: Some scopes failed! To authorize them, please go to:

https://gam-shortn.appspot.com/6d7kp9

You will be directed to the Google Workspace admin console Security/API Controls/Domain-wide Delegation page The "Add a new Client ID" box will open Make sure that "Overwrite existing client ID" is checked Please click Authorize to allow these scopes access. After authorizing it may take some time for this test to pass so go grab a cup of coffee and then try this command again.

How do we get to Google Workspace admin console Security/API Controls/Domain-wide Delegation page?

Thanks

Mark Willis, PMP Senior IT Project Manager School District of Philadelphia (215) 400-5031

https://api.accredible.com/v1/frontend/credential_website_embed_image/badge/36561610?key=522b60e90633bda83a700ed65361e07eccbdb2272e18993024bfcdfd435ecfd2

*Click *here https://philasd.co1.qualtrics.com/jfe/form/SV_6SiweqqjqE7deT3?Source=EMAILIT&Office=Office%20of%20Information%20Technology%20and%20Data%20Management https://philasd.co1.qualtrics.com/jfe/form/SV_6SiweqqjqE7deT3?Source=EMAILIT&Office=Office%20of%20Information%20Technology%20and%20Data%20Managementto

tell us how we are doing!

Any Questions? Please call the I.T. Help Desk at 215-400-5555 or email at @. @.>.*

Visit philasd.org/technology http://philasd.org/technology for more information.

Visit sishelp.philasd.org http://sishelp.philasd.org/ for SIS training resources.

On Wed, Jul 27, 2022 at 2:35 PM Ross Scroggs @.***> wrote:

What does this show:

gam user bthomas check serviceaccount

Ross

On Wed, Jul 27, 2022 at 4:45 AM mtwillis1965 @.***> wrote:

The user can do a gam info user but can not do a gam user bthomas sendas rflask "Bob Thomas"

he gets this error message ERROR: User e https://groups.google.com/mail address: unauthorized_client: Client is unauthorized to retrieve access tokens using this method, or client not authorized for any of the scopes requested.

How do I fix this?

— Reply to this email directly, view it on GitHub https://github.com/GAM-team/GAM/issues/1546#issuecomment-1196622193, or unsubscribe < https://github.com/notifications/unsubscribe-auth/ACCTYL4GQH7YKNG7CG3ZEX3VWEOOTANCNFSM54ZJLDAA

. You are receiving this because you are subscribed to this thread.Message ID: @.***>

-- Ross Scroggs @.***

— Reply to this email directly, view it on GitHub https://github.com/GAM-team/GAM/issues/1546#issuecomment-1197215340, or unsubscribe https://github.com/notifications/unsubscribe-auth/AW2TKLTYSAETKY4JQUQKL3DVWF6OLANCNFSM54ZJLDAA . You are receiving this because you authored the thread.Message ID: @.***>

— Reply to this email directly, view it on GitHub https://github.com/GAM-team/GAM/issues/1546#issuecomment-1207936646, or unsubscribe https://github.com/notifications/unsubscribe-auth/ACCTYL2BZC4DJNHQH5S7G7DVYDNN5ANCNFSM54ZJLDAA. You are receiving this because you commented.

Thanks so much,

It is now working we were able to get it allow all the API's

Thanks again.

Mark Willis, PMP Senior IT Project Manager School District of Philadelphia (215) 400-5031

https://api.accredible.com/v1/frontend/credential_website_embed_image/badge/36561610?key=522b60e90633bda83a700ed65361e07eccbdb2272e18993024bfcdfd435ecfd2

tell us how we are doing!

Any Questions? Please call the I.T. Help Desk at 215-400-5555 or email at @. @.>.*

Visit philasd.org/technology http://philasd.org/technology for more information.

Visit sishelp.philasd.org http://sishelp.philasd.org/ for SIS training resources.

On Mon, Aug 8, 2022 at 10:07 AM Ross Scroggs @.***> wrote:

The link: https://gam-shortn.appspot.com/6d7kp9 < https://gam-shortn.appspot.com/6d7kp9>

will take you to:

Google Workspace admin console Security/API Controls/Domain-wide Delegation page

Ross

-- @.***

On Aug 8, 2022, at 3:20 AM, mtwillis1965 @.***> wrote:

Good Morning Ross,

So it took so long to get back to you.

Here is what the user got?

mac-D25Y5093J1GP:~ cverrill$ gam user bthomas check serviceaccount Version Check: Current: 6.21 Latest: 6.22

GAM 6.22 release notes:

Workaround Google bug that prevents large domains from printing devices

1534

Allow super admins to delete any shared drive (Ross) Add address fields to buildings (Ross) -Various other fixes and improvements by Ross and Jay

Hit CTRL+C to visit the GAM website and download the latest release or wait 15 seconds continue with this boring old version. GAM won't bother you with this announcement for 1 week or you can create a file named noupdatecheck.txt in the same location as gam.py or gam.exe and GAM won't ever check for updates. Computer clock status: Your system time differs from admin.googleapis.com by less than 1 second PASS Service Account Private Key Authentication: Authenticating... PASS Checking key age. Google recommends rotating keys on a routine basis... Key is 14 days old PASS Domain-Wide Delegation authentication as @.***: https://mail.google.com/ FAIL https://www.googleapis.com/auth/apps.alerts FAIL https://www.googleapis.com/auth/calendar FAIL https://www.googleapis.com/auth/cloud-identity FAIL https://www.googleapis.com/auth/drive FAIL https://www.googleapis.com/auth/drive.activity FAIL https://www.googleapis.com/auth/gmail.settings.basic FAIL https://www.googleapis.com/auth/gmail.settings.sharing FAIL https://www.googleapis.com/auth/spreadsheets FAIL

ERROR: Some scopes failed! To authorize them, please go to:

https://gam-shortn.appspot.com/6d7kp9

You will be directed to the Google Workspace admin console Security/API Controls/Domain-wide Delegation page The "Add a new Client ID" box will open Make sure that "Overwrite existing client ID" is checked Please click Authorize to allow these scopes access. After authorizing it may take some time for this test to pass so go grab a cup of coffee and then try this command again.

How do we get to Google Workspace admin console Security/API Controls/Domain-wide Delegation page?

Thanks

Mark Willis, PMP Senior IT Project Manager School District of Philadelphia (215) 400-5031

https://api.accredible.com/v1/frontend/credential_website_embed_image/badge/36561610?key=522b60e90633bda83a700ed65361e07eccbdb2272e18993024bfcdfd435ecfd2

*Click *here < https://philasd.co1.qualtrics.com/jfe/form/SV_6SiweqqjqE7deT3?Source=EMAILIT&Office=Office%20of%20Information%20Technology%20and%20Data%20Management < https://philasd.co1.qualtrics.com/jfe/form/SV_6SiweqqjqE7deT3?Source=EMAILIT&Office=Office%20of%20Information%20Technology%20and%20Data%20Management to

tell us how we are doing!

Any Questions? Please call the I.T. Help Desk at 215-400-5555 or email at @. @.>.*

Visit philasd.org/technology http://philasd.org/technology for more information.

Visit sishelp.philasd.org http://sishelp.philasd.org/ for SIS training resources.

On Wed, Jul 27, 2022 at 2:35 PM Ross Scroggs @.***> wrote:

What does this show:

gam user bthomas check serviceaccount

Ross

On Wed, Jul 27, 2022 at 4:45 AM mtwillis1965 @.***> wrote:

The user can do a gam info user but can not do a gam user bthomas sendas rflask "Bob Thomas"

he gets this error message ERROR: User e https://groups.google.com/mail address: unauthorized_client: Client is unauthorized to retrieve access tokens using this method, or client not authorized for any of the scopes requested.

How do I fix this?

— Reply to this email directly, view it on GitHub <https://github.com/GAM-team/GAM/issues/1546#issuecomment-1196622193 , or unsubscribe <

https://github.com/notifications/unsubscribe-auth/ACCTYL4GQH7YKNG7CG3ZEX3VWEOOTANCNFSM54ZJLDAA

. You are receiving this because you are subscribed to this thread.Message ID: @.***>

-- Ross Scroggs @.***

— Reply to this email directly, view it on GitHub https://github.com/GAM-team/GAM/issues/1546#issuecomment-1197215340, or unsubscribe < https://github.com/notifications/unsubscribe-auth/AW2TKLTYSAETKY4JQUQKL3DVWF6OLANCNFSM54ZJLDAA

. You are receiving this because you authored the thread.Message ID: @.***>

— Reply to this email directly, view it on GitHub < https://github.com/GAM-team/GAM/issues/1546#issuecomment-1207936646>, or unsubscribe < https://github.com/notifications/unsubscribe-auth/ACCTYL2BZC4DJNHQH5S7G7DVYDNN5ANCNFSM54ZJLDAA . You are receiving this because you commented.

— Reply to this email directly, view it on GitHub https://github.com/GAM-team/GAM/issues/1546#issuecomment-1208177803, or unsubscribe https://github.com/notifications/unsubscribe-auth/AW2TKLR6QIDAH5WYWAG26MLVYEIBPANCNFSM54ZJLDAA . You are receiving this because you authored the thread.Message ID: @.***>

I will have the user try it and get back to you.

Thanks

Mark Willis, PMP Senior IT Project Manager School District of Philadelphia (215) 400-5031

https://api.accredible.com/v1/frontend/credential_website_embed_image/badge/36561610?key=522b60e90633bda83a700ed65361e07eccbdb2272e18993024bfcdfd435ecfd2

tell us how we are doing!

Any Questions? Please call the I.T. Help Desk at 215-400-5555 or email at @. @.>.*

Visit philasd.org/technology http://philasd.org/technology for more information.

Visit sishelp.philasd.org http://sishelp.philasd.org/ for SIS training resources.

On Wed, Jul 27, 2022 at 2:35 PM Ross Scroggs @.***> wrote:

What does this show:

gam user bthomas check serviceaccount

Ross

On Wed, Jul 27, 2022 at 4:45 AM mtwillis1965 @.***> wrote:

The user can do a gam info user but can not do a gam user bthomas sendas rflask "Bob Thomas"

he gets this error message ERROR: User e https://groups.google.com/mail address: unauthorized_client: Client is unauthorized to retrieve access tokens using this method, or client not authorized for any of the scopes requested.

How do I fix this?

— Reply to this email directly, view it on GitHub https://github.com/GAM-team/GAM/issues/1546#issuecomment-1196622193, or unsubscribe < https://github.com/notifications/unsubscribe-auth/ACCTYL4GQH7YKNG7CG3ZEX3VWEOOTANCNFSM54ZJLDAA

. You are receiving this because you are subscribed to this thread.Message ID: @.***>

-- Ross Scroggs @.***

— Reply to this email directly, view it on GitHub https://github.com/GAM-team/GAM/issues/1546#issuecomment-1197215340, or unsubscribe https://github.com/notifications/unsubscribe-auth/AW2TKLTYSAETKY4JQUQKL3DVWF6OLANCNFSM54ZJLDAA . You are receiving this because you authored the thread.Message ID: @.***>

GAM-team / GAM

1534

1534

1534