<iframe src="https://www.googletagmanager.com/ns.html?id=GTM-M74D8PB" height="0" width="0" style="display:none;visibility:hidden">
Loading
Skip to NavigationSkip to Main Content
Google Workspace Push Group Error "Not Authorized to access this resource/api"
Okta Classic Engine
Okta Integration Network
Overview

Google Workspace push group fails with the following error visible in the Okta dashboard:

Unable to update Group Push mapping target App group xxx: Failed to create group xxx. Not Authorized to access this resource/api 
 

Applies To
  • Google Workspace
  • Provisioning
  • Push Group
  • Error
Cause
The most common reason for this error is that the Google Workspace app has the wrong domain name configured. The domain should be the same as the domain used in the mail address (also used for authenticating with Google). 
Solution
  • Ensure that the Google admin used for Provisioning has Super admin permission in Google Workspace.
  • Enable API access in G Suite under Security > API Reference > API Access and click  Enable API Access.
  • Ensure that the account used for API access is still valid.
  • Ensure the Google Apps company domain configured under Okta Google Workspace app > General tab is the same as the domain in the mail address used for authenticating with Google.
Loading
Google Workspace Push Group Error "Not Authorized to access this resource/api"