Google Ads API Error - Request had insufficient authentication scopes. ACCESS_TOKEN_SCOPE_INSUFFICIENT. PERMISSION_DENIED.

Problem

Sometimes you might get the following error while making Google Ads API calls using JSON Source. 

The remote server retumed an error: (403) Forbidden.
Response Url: https://googleads.googleapis.com/v9/customers:listAccessibleCustomers

Status Code: Forbidden

Response Body: 
{
    "error": {
        "code": 403,
        "message": "Request had insufficient authentication scopes.",
		"status": "PERMISSION_DENIED",
        "details": [
            {
              "@type": "type.googleapis.com/google.rpc.ErrorInfo",              
              "reason": "ACCESS_TOKEN_SCOPE_INSUFFICIENT",
              "domain": "googleapis.com",
              "metadata": {
		"service": "googleads.googleapis.com"
                "method": "google.ads.googleads.v9.services.CustomerService.ListAccessibleCustomers",
              }
            }
        ]
    }
}

 

Possible Cause

1. Desired Scope is missing while you generate the token. API requires authorization, specifically it requires that the user be authorized using the API-specific scope while you generate the token.
2. You denied Access while generating the Token.
3. Access Token is expired while you make the API Call.

Possible Solutions

1. Please check that in the OAuth Connection you have passed the API-specific scope before you generate the token. e.g. For Method: customers. listAccessibleCustomers below scope is required.

   Authorization Scopes

   Requires the following OAuth scope:

   • https://www.googleapis.com/auth/adwords
2. Make sure to allow access to PowerPack, while you generate the token allow the Access.

3. It may be possible that the access token is expired if you are not using Offline access.

   Please refer to below link for the same.

   https://developers.google.com/google-ads/api/docs/oauth/internals#offline_access

   It's common for a Google Ads API client app to request offline access. For example, your app may want to run batch jobs when your user is not physically online browsing your website.

   To request offline access for a web app type, make sure you set the access_type parameter to offline. You can find additional information in Google's OAuth2 guide.

   Please set the below extra attributes in the advanced tab Auth Request, generate the token again and allow the access and try to make the call:

   access_type=offline&include_granted_scopes=true&prompt=consent

   

Contact Us

If you have more question(s) feel free to contact us via Live chat or email at [e-mail]