Google Permission Error: Caller Does Not Have Permission
Resolve the "HttpStatusCode is Unauthorized" error when auditing or migrating files from Google Drive.
Error Overview
When auditing or migrating files from Google Drive, you may encounter this error message:
"The service drive has thrown an exception. HttpStatusCode is Unauthorized. The caller does not have permission"
This error indicates that the migration service account lacks the necessary permissions to access Google Drive files for the specified users.
Root Causes
This permission error can be triggered by two distinct issues:
Cause 1: Group-Level Restriction
The "Drive and Docs" app is disabled for user groups in Google Workspace Admin Console.
Cause 2: Individual User Setting
The "Allow users to access Google Drive with the Drive SDK API" setting is turned off for specific users.
Why This Matters
Google Workspace allows administrators to control third-party API access to user data. For migration to work, the Drive SDK API must be enabled for all users being migrated.
Solution
To resolve this error, enable both permission settings for affected users:
Enable Drive and Docs
Activate the "Drive and Docs" application at the organizational unit or group level.
Enable Drive SDK API
Turn on "Allow users to access Google Drive with the Drive SDK API" for users.
Step-by-Step Fix
Part 1: Enable Drive and Docs App
- 1 Access Google Admin Console
Go to admin.google.com and sign in with your administrator account.
- 2 Navigate to Apps
Click Apps → Google Workspace → Drive and Docs.
- 3 Select Organizational Unit
Choose the organizational unit containing users to be migrated, or select the top-level organization for all users.
- 4 Enable Service
Ensure the service status is set to ON for everyone.
Part 2: Enable Drive SDK API Access
- 1 Go to Drive Settings
In Google Admin Console, navigate to Apps → Google Workspace → Drive and Docs → Features and Applications.
- 2 Find Drive SDK Setting
Locate the setting "Allow users to access Google Drive with the Drive SDK API".
- 3 Enable the Setting
Check the box to enable Drive SDK API access.
- 4 Save Changes
Click Save to apply the changes.
Propagation Time
Changes to Google Workspace settings may take up to 24 hours to propagate across all users. However, most changes take effect within a few minutes.
Verification
After enabling the settings, verify the fix by:
Still Having Issues?
If the error persists after enabling these settings, verify that domain-wide delegation is properly configured for your service account. See our Google Service Account Creation guide for details.