Error: MigrationPermanentException -Unauthorized

Question

I have Migration from&nbsp;google g suite to office 365 and when i make sync it issue&nbsp;&nbsp;User statusData migrated:Migration rate:Last successful sync date:Error:&nbsp;MigrationPermanentException: The call to https://www.googleapis.com/oauth2/v4/token returned with status code Unauthorized: Unauthorized Error response: unauthorized_client Error description: Client is unauthorized to retrieve access tokens using this method, or client not authorized for any of the scopes requested. --&gt; The call to https://www.googleapis.com/oauth2/v4/token returned with status code Unauthorized: Unauthorized Error response: unauthorized_client Error description: Client is unauthorized to retrieve access tokens using this method, or client not authorized for any of the scopes requested.&nbsp;&nbsp;Can help me&nbsp;

cyber-groupcouk · Answer

Hi emadadel2008 ,&nbsp;I had the same issue but from within Gsuite admin I went to Security &gt; API Permissions and then added the Service Account as a trusted app.&nbsp; I could then see mail migrating across to the O365 mailboxes from gsuite.&nbsp;Hope it helps.

emadadel2008 · Answer

MMartinez07&nbsp;&nbsp;Well, make sure the token is valid, and has the necessary permissions/scopes as detailed here:&nbsp;https://docs.microsoft.com/en-us/exchange/mailbox-migration/perform-g-suite-migration#grant-access-t...&nbsp;make sure&nbsp; you have done this point "Grant access to the service account for your Google tenant" in&nbsp;&nbsp;https://docs.microsoft.com/en-us/exchange/mailbox-migration/perform-g-suite-migration#grant-access-t...&nbsp;&nbsp;&nbsp;Grant access to the service account for your Google tenantGo to the&nbsp;G Suite Admin page&nbsp;and sign in as G Suite admin for your tenant.Click&nbsp;Security, then click&nbsp;Advanced settings, and then click&nbsp;Manage API client access.In&nbsp;Client Name, type the ClientId for the service account you created in the&nbsp;Create a Google Service Account&nbsp;section above.In&nbsp;API Scopes, add the required scopes in comma-separated format, with no spaces in between. For example,&nbsp;https://mail.google.com/,https://www.googleapis.com/auth/calendar,https://www.google.com/m8/feeds/,https://www.googleapis.com/auth/gmail.settings.sharing. If the API Scopes are entered incorrectly, the resulting list won't match and the migration process will fail later, after you start the migration batch.Click&nbsp;Authorize. Verify that the resulting list shows "Email (Read/Write/Send)", "Calendar (Read-Write)", "Contacts (Read/Write)", and "https://www.googleapis.com/auth/gmail.settings.sharing".&nbsp;&nbsp;&nbsp;Note

idacike · Answer

This video might be useful to cross-check the steps. https://youtu.be/1FTGIcNWRQ4I restarted the process from the beginning. There was a step which I missed the first couple of times and the video actually help me pick that up along with the suggestions in this forum thread.

josepvidal1770 · Answer

idacike&nbsp;Thanks!&nbsp;fixed with the video instructions.

vasilmichev · Answer

Well, make sure the token is valid, and has the necessary permissions/scopes as detailed here:&nbsp;https://docs.microsoft.com/en-us/exchange/mailbox-migration/perform-g-suite-migration#grant-access-to-the-service-account-for-your-google-tenant
&nbsp;
Other than that, open a support case, this forum is not really for troubleshooting.

Forum Discussion

Error: MigrationPermanentException -Unauthorized

9 Replies

Grant access to the service account for your Google tenant