Hi: This was just escalated to me. The error OPERATION_NOT_PERMITTED_FOR_CONTEXT usually indicates that the action you're trying to perform isn't allowed for the type of account or the specific context in which you're operating. Given that you're trying to create customer client accounts under a manager account, here are some things to check:
Confirm CustomerService.CreateCustomerClient Usage: Confirm you are indeed trying to use the CustomerService and its CreateCustomerClient method for creating new client accounts, not GoogleAdsService.Mutate (which is for operations within an existing account). Verify Ensure your API client configuration (e.g., google-ads.yaml) has the login_customer_id set to the ID of the Manager Account (255-136-6266). Verify OAuth2 Credentials: Are the OAuth2 credentials (client ID, client secret, refresh token) generated by a user who has admin access to the MCC 255-136-6266? If you are unsure, you should regenerate the refresh token using the "Log in with Google" flow with an admin user of that MCC. Check User Permissions in MCC UI: The user who authorized the OAuth2 credentials needs to have "Admin" rights (or equivalent to create accounts) within the MCC 255-136-6266. you can check this under "Tools & Settings" -> "Access and security" in the Google Ads UI for the MCC. Simplified Test Case: Try the most basic CustomerService.CreateCustomerClient call with only the required fields (descriptive name, currency code, time zone) to isolate the issue. Request Payload: If the issue persists after checking the above, request the exact request body (or the Python code constructing the CreateCustomerClientRequest) you are sending that results in the _SECq70Mb5DBKfbdwGozfw request ID. The UNKNOWN and INVALID_ARGUMENT errors often point to issues in the request payload itself. Since we have successfully created client accounts with your test manager account, the issue is very likely specific to your authentication, permissions, or the way you are constructing your API request for client creation. The OPERATION_NOT_PERMITTED_FOR_CONTEXT strongly suggests an authentication/authorization mismatch for the intended operation. Thanks, Bob Hancock Google Ads API Team Feedback How was our support today? [2025-05-06 12:23:58Z GMT] This message is in relation to case "ref:!00D1U01174p.!500Ht01qVyIw:ref" (ADR-00304053) -- -- =~=~=~=~=~=~=~=~=~=~=~=~=~=~=~=~=~=~=~=~=~=~=~=~ Also find us on our blog: https://googleadsdeveloper.blogspot.com/ =~=~=~=~=~=~=~=~=~=~=~=~=~=~=~=~=~=~=~=~=~=~=~=~ You received this message because you are subscribed to the Google Groups "AdWords API and Google Ads API Forum" group. To post to this group, send email to adwords-api@googlegroups.com To unsubscribe from this group, send email to adwords-api+unsubscr...@googlegroups.com For more options, visit this group at http://groups.google.com/group/adwords-api?hl=en --- You received this message because you are subscribed to the Google Groups "Google Ads API and AdWords API Forum" group. To unsubscribe from this group and stop receiving emails from it, send an email to adwords-api+unsubscr...@googlegroups.com. To view this discussion visit https://groups.google.com/d/msgid/adwords-api/9hko4000000000000000000000000000000000000000000000SVUAFY00i_y2N_KhSeWhYH9OJP-lzw%40sfdc.net.
