2015-08-27 27 views
0

我在使用Google的目录API从电子邮件组中拉出用户列表时遇到问题。这里是我的代码:Google的管理员SDK目录API - 403未授权

CLIENT_SECRET = 'group_auth.p12' 
CLIENT_EMAIL = "[email protected]" 
with open(CLIENT_SECRET, "rb") as f: 
    PRIVATE_KEY = f.read() 
f.close() 

credentials = SignedJwtAssertionCredentials(CLIENT_EMAIL, PRIVATE_KEY, scope="https://www.googleapis.com/auth/admin.directory.group.readonly") 

http = httplib2.Http() 
http = credentials.authorize(http) 

service = build("admin", "directory_v1", http) 
request = service.members().get(groupKey=*taken-out*, memberKey="") 
response = request.execute() 

这是我收到的错误:

No handlers could be found for logger "oauth2client.util" 
Traceback (most recent call last): 
    File "google_group_membership.py", line 21, in <module> 
    response = request.execute() 
    File "/Users/jleung/googleapi/lib/python2.7/site-packages/oauth2client/util.py", line 137, in positional_wrapper 
return wrapped(*args, **kwargs) 
    File "/Users/jleung/googleapi/lib/python2.7/site-packages/googleapiclient/http.py", line 729, in execute 
raise HttpError(resp, content, uri=self.uri) 
googleapiclient.errors.HttpError: <HttpError 403 when requesting  https://www.googleapis.com/admin/directory/v1/groups/itgroup%40appdynamics.com/members/?alt=json returned "Not Authorized to access this resource/api"> 

在我的谷歌的控制台,我确信我的谷歌API服务帐户具有正确的权限。任何帮助,将不胜感激

谢谢

回答

1

想通了,我不得不去我的谷歌域名的管理面板,并在安全设置 - >高级设置 - >管理API客户端访问

我不得不在那里添加我的客户ID和范围