403 Error From Google Admin Sdk With Appassertioncredentials

I'm trying to list users via Google admin directory API. import logging import os from google.appengine.api import memcache from googleapiclient import discovery from oauth2client

Solution 1:

Follow the steps indicated in Delegating domain-wide authority to the service account:

Then, an administrator of the G Suite domain must complete the following steps:

1. Go to your G Suite domain’s Admin console.
2. Select Security from the list of controls. If you don't see Security listed, select More controls from the gray bar at the bottom of the page, then select Security from the list of controls. If you can't see the controls, make sure you're signed in as an administrator for the domain.
3. Select Show more and then Advanced settings from the list of options.
4. Select Manage API client access in the Authentication section.
5. In the Client Name field enter the service account's Client ID. You can find your service account's client ID in the Service accounts page.
6. In the One or More API Scopes field enter the list of scopes that your application should be granted access to. For example, if your application needs domain-wide access to the Google Drive API and the Google Calendar API, enter: https://www.googleapis.com/auth/drive, https://www.googleapis.com/auth/calendar.
7. Click Authorize.

Make sure your service account is set to Administrator.