Not Authorized to access this resource/api, forbidden

[bisser-cw]

Hi,

For some reason, although https://www.googleapis.com/auth/drive.readonly and https://www.googleapis.com/auth/admin.directory.user.readonly scopes are granted to the service account I'm getting Error: error creating service: unable to retrieve users: googleapi: Error 403: Not Authorized to access this resource/api, forbidden
Could it be that another scope is needed or I'm not doing it the right way?

[bisser-cw]

I think I found the reason for this - the domain admin must have some specific rights. I tried with my account, I have soma admin rights but I'm not a super admin and goth the error above. I tried with a super admin account and it seems to be working.