More debug: - Carefully read docs, realized service accounts can only communicate with the Ads API via impersonating a user - Added domain-wide delegation in Workspace for the service account, scoped to https://www.googleapis.com/auth/adwords - The JWT now included sub with the email being an email that has access to all clients' Ads accounts - Redid flow for getting access token, same result. "Invalid customer ID <an actual client customer ID>"
On Saturday, June 25, 2022 at 9:58:54 PM UTC-5 Alley wrote: > Using service account, nodejs, not using a client. This setup works great > for Analytics, failing to get anything back from Ads. > > - Auth performs fine, get JWT and sending Developer-token header w/ > the access token as Bearer > - Every request to googleAds:searchStream results in INVALID_ARGUMENT > -> INVALID_CUSTOMER_ID > - The customer ID is correct, the developer token is issued by the > Manager account with access to the customer ID > > Thinking it's some access or permission issue, but nothing is out of the > ordinary here. There's two things which may be funky: > > 1. The email associated with the Manager account is both a User on the > customer ID account and a manager > 2. There's an errant old Manager account associated with that email, > but it does not have Basic access to API and the token is not the token in > use here > > Any help would be appreciated, beating my head against a wall. The query > being sent to the endpoint is vanilla, result is the same even with a blank > payload or something as simple as "SELECT campaign.name FROM campaign." > > URL format is > https://googleads.googleapis.com/v11/customers/CUSTOMER_ID/googleAds:searchStream, > > JSON, payload JSON, etc. > -- -- =~=~=~=~=~=~=~=~=~=~=~=~=~=~=~=~=~=~=~=~=~=~=~=~ Also find us on our blog: https://googleadsdeveloper.blogspot.com/ =~=~=~=~=~=~=~=~=~=~=~=~=~=~=~=~=~=~=~=~=~=~=~=~ You received this message because you are subscribed to the Google Groups "AdWords API and Google Ads API Forum" group. To post to this group, send email to adwords-api@googlegroups.com To unsubscribe from this group, send email to adwords-api+unsubscr...@googlegroups.com For more options, visit this group at http://groups.google.com/group/adwords-api?hl=en --- You received this message because you are subscribed to the Google Groups "Google Ads API and AdWords API Forum" group. To unsubscribe from this group and stop receiving emails from it, send an email to adwords-api+unsubscr...@googlegroups.com. To view this discussion on the web visit https://groups.google.com/d/msgid/adwords-api/91b45f63-e927-45d1-b494-d5eb1693ad82n%40googlegroups.com.
