Hello Sang, The USER_PERMISSION_DENIED <https://developers.google.com/adwords/api/docs/common-errors#AuthorizationError.USER_PERMISSION_DENIED> error occurs when there is no link between the manager account authenticated in the request and the client account specified in the headers. Please make sure that the user authenticating the call having access to the account targeted in the API call. If the problem persists, please share the share the user's email address authenticating the call and the complete SOAP logs(request and response <https://developers.google.com/adwords/api/docs/guides/call-structure#response>) without redacting any information. You could refer this README.md <https://github.com/googleads/googleads-python-lib#how-do-i-log-soap-interactions> file to enable logging. You could use reply privately to the author option while sharing the details requested.
Regards, Sai Teja, AdWords API Team. On Tuesday, November 20, 2018 at 6:20:08 AM UTC-5, san...@anymindgroup.com wrote: > > Hello, > > We just encounter this issue yesterday, looks like something wrong with > GoogleAds api or refresh_token permissions. > > So we are working as a company with a hierachy Adwords accounts: Main > account => MCC account (for different countries) => single account. > We are using both python/php googleads api for user authentication and > store refresh_token/access_token to build our in-house BI tools. > > Yesterday, we found any user with standard access to MCC account after > authentication (2 step verifcation completed), having an refresh_token that > not working. > Even when we try to generate refresh_token using Adwords OAuth2 > Playground, the issue still the same. > > It is throwing this exception when we try to get list customer from > account: > > googleads.errors.GoogleAdsServerFault: > [AuthorizationError.USER_PERMISSION_DENIED @ ; trigger:'<null>'] > > We use the same code as the example getting hierrachy account here: > https://developers.google.com/adwords/api/docs/samples/python/account-management > > Another note, this is working fine for users having access to top account > (the account that has access to all MCC account). > > Can you please check, or let me know if other details needed. > > Thanks, > Sang > -- -- =~=~=~=~=~=~=~=~=~=~=~=~=~=~=~=~=~=~=~=~=~=~=~=~ Also find us on our blog: https://googleadsdeveloper.blogspot.com/ =~=~=~=~=~=~=~=~=~=~=~=~=~=~=~=~=~=~=~=~=~=~=~=~ You received this message because you are subscribed to the Google Groups "AdWords API and Google Ads API Forum" group. To post to this group, send email to adwords-api@googlegroups.com To unsubscribe from this group, send email to adwords-api+unsubscr...@googlegroups.com For more options, visit this group at http://groups.google.com/group/adwords-api?hl=en --- You received this message because you are subscribed to the Google Groups "AdWords API and Google Ads API Forum" group. To unsubscribe from this group and stop receiving emails from it, send an email to adwords-api+unsubscr...@googlegroups.com. Visit this group at https://groups.google.com/group/adwords-api. To view this discussion on the web visit https://groups.google.com/d/msgid/adwords-api/c7d7a487-11b5-407f-857d-2ee5ae65a29c%40googlegroups.com. For more options, visit https://groups.google.com/d/optout.
