Google Analytics Management API-插入方法-权限不足HTTP 403

Question

我试图通过API向我的Google Analytics帐户添加用户，但代码产生了以下错误:

googleapiclient.errors.httperror:https://www.googleapis.com/analytics/v3/management/accounts/**accountid**/entityuserlinks?alt=json返回“权限不足&>”；

我对此帐户拥有管理员权限-管理用户。我可以通过Google Analytics接口添加或删除用户，但不能通过API。我还添加了服务帐户电子邮件到GA作为一个用户。作用域设置为Analytics.Manage.Users

null

def add_user(service):br> service.management().accountUserLinks().insert(accountid='xxxx'，br>body=br>'permissions':br>'local':[br>'edit'，br>]br>，br>'userref':br>'email':'[e-mail]'br>br>br>).execute()br>
除了TypeError，error:br>#在构造查询时处理错误。br>print'构造

任何帮助都将不胜感激。谢谢！！

Answer 1

还请记住，您必须指定您想要使用的作用域，这里的示例（使用Google稍微修改的示例）默认定义了两个作用域，这两个作用域不允许插入用户（因为它们都给出只读权限），尝试这样做将导致“错误403禁止”。

下面的代码给出了所需的范围:

from apiclient.discovery import build
from googleapiclient.errors import HttpError
from oauth2client.service_account import ServiceAccountCredentials


def get_service(api_name, api_version, scopes, key_file_location):
    """Get a service that communicates to a Google API.

    Args:
        api_name: The name of the api to connect to.
        api_version: The api version to connect to.
        scopes: A list auth scopes to authorize for the application.
        key_file_location: The path to a valid service account JSON key file.

    Returns:
        A service that is connected to the specified API.
    """

    credentials = ServiceAccountCredentials.from_json_keyfile_name(
            key_file_location, scopes=scopes)

    # Build the service object.
    service = build(api_name, api_version, credentials=credentials)

    return service


def get_first_profile_id(service):
    # Use the Analytics service object to get the first profile id.

    # Get a list of all Google Analytics accounts for this user
    accounts = service.management().accounts().list().execute()

    if accounts.get('items'):
        # Get the first Google Analytics account.
        account = accounts.get('items')[0].get('id')

        # Do something, e.g. get account users & insert new ones 
        # ...


def main():
    # Define the auth scopes to request.

    # Add here
    # https://www.googleapis.com/auth/analytics.manage.users
    # to be able to insert users as well:
    scopes = [
        'https://www.googleapis.com/auth/analytics.readonly',
        'https://www.googleapis.com/auth/analytics.manage.users.readonly',
    ]
    key_file_location = 'my_key_file.json'

    # Authenticate and construct service.
    service = get_service(
            api_name='analytics',
            api_version='v3',
            scopes=scopes,
            key_file_location=key_file_location)

    profile_id = get_first_profile_id(service)
    print_results(get_results(service, profile_id))


if __name__ == '__main__':
    main()

问候，

HERRB92

Answer 2

问题是我使用了一个服务帐户，而我本应使用一个已安装的应用程序。我不需要一个服务帐户，因为我可以使用我自己的凭据访问。这对我来说是个窍门！