Authorization Error

[mcdave1975]

HI JayOlee,

I try gyb email davelodia@twoseasonsresorts.com

try to paste the link this the error.

Authorization Error Error 400: admin_policy_enforced Access to your account data is restricted by policies within your organization. Please contact the administrator for twoseasonsresorts.com for more information. Request Details access_type=offline login_hint=davelodia@twoseasonsresorts.com response_type=code redirect_uri=urn:ietf:wg:oauth:2.0:oob state=196qnO9qPmzVDYsSFm3C0hCSx8OoKQ code_challenge_method=S256 hd=twoseasonsresorts.com prompt=consent client_id=683461650598 code_challenge=ZywNGYPbNjGeXjw4s-7EkPnrg9O0uL5bef2JCQO36s4 scope=https://www.googleapis.com/auth/userinfo.email https://www.googleapis.com/auth/gmail.readonly https://www.googleapis.com/auth/apps.groups.migration https://www.googleapis.com/auth/drive.appdata openid

[stale[bot]]

This issue has been automatically marked as stale because it has not had recent activity. It will be closed if no further activity occurs.

[bryantech]

Did you figure this out?

[klatys]

For anyone searching in future :) This worked for me, insted of client id in the guide use the one you see on the error page from google

[Par-to]

Can we wake this one up?

Part of the great google apps migration and an admitted noob.

I followed @klatys link above - substituting GAM for Interview Planner but still getting:

Authorization Error Error 400: admin_policy_enforced Access to your account data is restricted by policies within your organization. Please contact the administrator for xxxxx.co.nz for more information. The content in this section has been provided by the app developer. This content has not been reviewed or verified by Google. If you’re the app developer, make sure that these request details comply with Google policies.

access_type: offline
login_hint: nick@xxxxx.co.nz
response_type: code
redirect_uri: urn:ietf:wg:oauth:2.0:oob
state: jPTQDaVOdTX00KckoQSp6ZsJnrDYQO
code_challenge_method: S256
hd: xxxxx.co.nz
prompt: consent
client_id: 623641583239-snf24aeq4ul52be11mbem1c0ps6vnmad
code_challenge: DtNnkQwCumeUcwrlibSF1YElK5pnn0c9IcYOTY_OpVc
scope: https://www.googleapis.com/auth/userinfo.email https://mail.google.com/ https://www.googleapis.com/auth/apps.groups.migration https://www.googleapis.com/auth/drive.appdata openid

[marcodallagatta]

I successfully managed to fix this error by following this guide: https://medium.com/@dantasfiles/migrating-emails-from-g-suite-legacy-to-a-normal-gmail-account-with-got-your-back-f9f08543ff81

[cliffordp]

thank you @klatys and @marcodallagatta ! Because the articles could go down at any time, and neither was complete to address this specific issue, I'm documenting it directly in here:

Seeing this error? Error 400: admin_policy_enforced

Click the "error details" to get your "client_id"

In Google Admin, go to Security > API Controls > click "MANAGE THIRD-PARTY APP ACCESS"

Click "Add app" > "OAuth App Name Or Client ID"

In the Search field, paste the "client_id" you copied earlier, then click "Search" button:

Give it the permissions you choose, such as "trusted/all"

===

That was all in the DESTINATION account when attempting to Restore. After I did that, I then got this error: Error 403: org_internal

So then I had to go back to the original/source/backup account's Google Cloud OAuth consent screen: https://console.cloud.google.com/apis/credentials/consent?project=**gyb-project-...**

Then click "MAKE EXTERNAL" then "Testing" in the popup

Then add your DESTINATION account's email address as a Test User:

And then it worked 🥇