got-your-back icon indicating copy to clipboard operation
got-your-back copied to clipboard

receiving 404 error when authorizing service accounts

Open janiececald opened this issue 3 years ago • 6 comments

The issue tracker is for reporting product deficiencies. How do I questions should be posted to the discussion forum at https://groups.google.com/group/got-your-back. When in doubt, start at the discussion forum and return here only when instructed to do so.

Please confirm the following:

  • I have upgraded to the latest GYB release from https://github.com/jay0lee/got-your-back/releases and I still have this issue.
  • I am typing the command as described in the GAM Wiki at https://github.com/jay0lee/got-your-back/wiki

Full steps to reproduce the issue:

  1. When Checking service account DwD for scopes getting fail
  2. try to launch https://gyb-shortn.jaylee.us/g2yau9
  3. get a 404 error

Expected outcome (what are you trying to do?):

  • Scope API page prompts, does not work
Screen Shot 2022-03-07 at 5 22 37 PM

Actual outcome (what errors or bad behavior do you see instead?): Screen Shot 2022-03-07 at 5 19 16 PM

janiececald avatar Mar 08 '22 01:03 janiececald

I'm seeing this as well - Installed GYB today so using a very recent version

I was able to work around this by using this article and taking information from the URL for the clientid and scopes

Porkstone avatar Mar 08 '22 14:03 Porkstone

I figured it out, the beginning of the link should read this "https://admin.google.com/ac/owl/domainwidedelegation?clientScopeToAdd= https://admin.google.com/ac/owl/domainwidedelegation?clientScopeToAdd=

NOT :"https://admin.google.com/yourdomain.com/ManageOauthClients?clientScopeToAdd= https://admin.google.com/b8ta.com/ManageOauthClients?clientScopeToAdd=https://mail.google.com/,https://www.googleapis.com/auth/apps.groups.migration,https://www.googleapis.com/auth/drive.appdata,https://www.googleapis.com/auth/userinfo.email&clientNameToAdd=116276825312893539343"

On Mar 8, 2022, at 6:57 AM, Charlie Barker @.***> wrote:

I'm seeing this as well - Installed GYB today so using a very recent version

— Reply to this email directly, view it on GitHub https://github.com/GAM-team/got-your-back/issues/362#issuecomment-1061866650, or unsubscribe https://github.com/notifications/unsubscribe-auth/AQSC3YWF2RDZOKMR5VBBNELU65TFXANCNFSM5QE6FPWQ. Triage notifications on the go with GitHub Mobile for iOS https://apps.apple.com/app/apple-store/id1477376905?ct=notification-email&mt=8&pt=524675 or Android https://play.google.com/store/apps/details?id=com.github.android&referrer=utm_campaign%3Dnotification-email%26utm_medium%3Demail%26utm_source%3Dgithub. You are receiving this because you authored the thread.

janiececald avatar Mar 08 '22 18:03 janiececald

So this can only be done by the domain administrator account? I can't get access to this page.

siliconpi avatar Nov 27 '22 14:11 siliconpi

Correct, if you are not the admin you cannot use service account authentication. That's by Google design, only admins have ability to authorize the service account and backup/restore mail data of other users.

You should just use the normal authentication as your own user.

Jay

jay0lee avatar Nov 27 '22 15:11 jay0lee

I'm just following the instructions in the program. There doesn't appear to be anything I need to change in case I'm a normal user.

On Sun, Nov 27, 2022, 9:13 PM Jay Lee @.***> wrote:

Correct, if you are not the admin you cannot use service account authentication. That's by Google design, only admins have ability to authorize the service account and backup/restore mail data of other users.

You should just use the normal authentication as your own user.

Jay

— Reply to this email directly, view it on GitHub https://github.com/GAM-team/got-your-back/issues/362#issuecomment-1328272978, or unsubscribe https://github.com/notifications/unsubscribe-auth/AKERNSIGBAS4Z2XVQJVP6ELWKN6THANCNFSM5QE6FPWQ . You are receiving this because you commented.Message ID: @.***>

siliconpi avatar Nov 27 '22 18:11 siliconpi

Sorry - to be clearer, I'm just an ordinary user (within a Google Workspace domain) trying to export my data out. I don't have any admin privileges. I followed the instructions and got to the screen shown by @janiececald but cannot access that admin page.

I'm not clear on what the "the normal authentication as your own user" is supposed to be.

You mean I should just use Takeout, or something else? I have the Takeout MBOX file. Will GAM be compatible with that?

siliconpi avatar Nov 28 '22 22:11 siliconpi