Hi John, I think the core issue is that service accounts are designed for much more than simply making requests without user interaction. This mechanism is also intended to allow impersonating other users on a domain, which isn't possible without google apps for your domain.
Another alternative is to use a regular OAuth2 token that you've authorized for offline access. The way this could work is: - Perform the OAuth2 flow once initially for setup, authorize for offline access (this is similar to the one-time setup that service accounts require). - Use the refresh token to obtain a new access token prior to making requests. - Profit by making API calls without any user interaction. The access token is valid for only 1 hour, but the refresh token can be used to obtain new access tokens until it has been revoked. - Kevin Winter AdWords API Team On Saturday, December 29, 2012 3:53:16 PM UTC-5, John Lister wrote: > > Hi, has anyone found a way to authorise a service client id to access the > adwords api without using google apps for business? I'm struggling with the > NOT_ADS_USER error as well... > > I've created the service account id and key using my MCC account details, > but do I need to create it as a normal user for the account I'd like access > to? Secondly reading some info on service accounts implies I need to > authorise the service account email address to access the api I'd like to > use. Do I need to register this as an adwords user? On the api console, I > don't see the adwords api listed so can't enable it from there... > > Thanks > > John > > On Tuesday, 13 November 2012 17:13:18 UTC, Micah Ransdell wrote: >> >> Thank you for the information. I'll see if I can find another way to get >> my API client recognized. >> >> [cc'ing the list] >> >> On Sun, Nov 11, 2012 at 5:52 PM, Win Ko Aye <w...@adzcentral.com> wrote: >> >>> Hi Micah, >>> >>> That's because OAuth2 server doesn't recognize the api client ID you >>> passed in CampaignService call. You need to get your api client ID >>> authorized first before using it. As far as I know, Google App console is >>> the only place you can authorize client service account, as of now. Maybe >>> they will expose that functionality in the api someway in the future. >>> >>> Another method is to use Web Service account that requires user >>> interaction but doesn't need to use Google App. >>> >>> Hope that helps. >>> >>> Win Ko >>> >>> >>> >>> On Sat, Nov 10, 2012 at 4:25 AM, Micah Ransdell <mjr...@gmail.com>wrote: >>> >>>> Win Ko Aye, >>>> >>>> I am trying to follow your instructions, but I am unable to complete >>>> Step 2 because we are not using Google Apps for Business. I am able to >>>> complete the other steps, and when I try to access the CampaignService I >>>> receive "AuthenticationError.NOT_ADS_USER" when trying to access the >>>> campaigns for one of the client accounts. >>>> >>> >>> >> -- -- =~=~=~=~=~=~=~=~=~=~=~=~=~=~=~=~=~=~=~=~=~=~=~=~ Also find us on our blog and discussion group: http://adwordsapi.blogspot.com http://groups.google.com/group/adwords-api =~=~=~=~=~=~=~=~=~=~=~=~=~=~=~=~=~=~=~=~=~=~=~=~ You received this message because you are subscribed to the Google Groups "AdWords API Forum" group. To post to this group, send email to adwords-api@googlegroups.com To unsubscribe from this group, send email to adwords-api+unsubscr...@googlegroups.com For more options, visit this group at http://groups.google.com/group/adwords-api?hl=en
