*Hello Joshua, could you try to add the “Cloud Translation API User” role in the service account from IAM? As of this [1] documentation, it includes the permission that showing in the error.[1] https://cloud.google.com/iam/docs/understanding-roles#cloud-translation-roles* On Monday, November 16, 2020 at 2:23:03 PM UTC-5 Joshua Smith wrote:
> I don’t think Google could have come up with a more confusing and > convoluted system for API permission management if they tried. > > So I’ve enabled the “cloud translation” API within my project. > > I have some Python (2.7, old school) code that goes: > > credentials = > ServiceAccountCredentials.from_json_keyfile_name(CLIENT_SECRETS_FILE, > scopes=['https://www.googleapis.com/auth/cloud-platform’]) > http_auth = credentials.authorize(Http()) > service = build("translation", "v3", http=http_auth) > service.projects().translateText(parent=“projects/*my-project-id-here*",body={"contents":"bonjour", > > "targetLanguageCode":"en"}).execute() > > And I get: > > googleapiclient.errors.HttpError: <HttpError 403 when requesting > https://translation.googleapis.com/v3/projects/*my-project-id-here*:translateText?alt=json > > returned "Cloud IAM permission 'cloudtranslate.generalModels.predict' > denied."> > > So it seems like I need to check some box somewhere to make this work, but > I can’t figure out where. > > The service account in the client secrets file is working fine when I use > it to hit Google Analytics from the same app. And in fact, my code to > access GA is almost identical except the scope and service call. > > > Any ideas? > > > -Joshua > > -- You received this message because you are subscribed to the Google Groups "Google App Engine" group. To unsubscribe from this group and stop receiving emails from it, send an email to [email protected]. To view this discussion on the web visit https://groups.google.com/d/msgid/google-appengine/38511647-af55-4440-b8a9-47a2d26e1f42n%40googlegroups.com.
