Okta Admins may have issues with creating new users or updating profiles from Okta to Google Workspace. One of the following errors may occur:
-
Automatic provisioning of user <username> to app Google Workspace failed: Failed to push profile update. Not Authorized to access this resource/api.
-
Automatic Provisioning of user <username> to app Google Workspace failed: Failed to create new user. Not Authorized to access this resource/api.
- Google Workspace
- Provisioning
This is an API authentication error with the Google Admin account used for provisioning. The admin account from Google Workspace that is used for provisioning does not have sufficient access/roles on Google Workspace.
-
Make sure that the Google Workspace admin used for provisioning has Super Admin rights in Google Workspace.
-
Ensure that API Access in Google Workspace is enabled. Sign in to the Google Workspace admin console, go to Security > API Reference > API Access, and check if Enable API Access is turned on.
-
Re-authenticate the API token between Okta and Google Workspace.
Go to Admin Dashboard in Okta > Applications > Applications > Google Workspace App > Provisioning > click Edit, and then Re-authenticate with Google Apps to reenter the Google Workspace Admin credentials. Once this is completed, click Save at the bottom of the Okta page.
