Migration from google g suite to office 365 - Error: MigrationPermanentException: The call to https://www.googleapis.com/oauth2/v4/token returned with status code Unauthorized:

Question

Error: MigrationPermanentException -Unauthorized

I have Migration from google g suite to office 365 and when i make sync it issue

User status
Data migrated:
Migration rate:
Last successful sync date:
Error: MigrationPermanentException: The call to https://www.googleapis.com/oauth2/v4/token returned with status code Unauthorized: Unauthorized Error response: unauthorized_client Error description: Client is unauthorized to retrieve access tokens using this method, or client not authorized for any of the scopes requested. --> The call to https://www.googleapis.com/oauth2/v4/token returned with status code Unauthorized: Unauthorized Error response: unauthorized_client Error description: Client is unauthorized to retrieve access tokens using this method, or client not authorized for any of the scopes requested.

Answer 1

Two things to resolve the issue.

1. Use the Service Account email ID as the endpoint
2. Add the following scopes in Google Admin > Security > API Controls > Domain-wide Delegation

https://mail.google.com/https://www.google.com/m8/feeds,https://www.googleapis.com/auth/contacts.readonly,https://www.googleapis.com/auth/calendar.readonly,https://www.googleapis.com/auth/admin.directory.group.readonly,https://www.googleapis.com/auth/admin.directory.user.readonly,https://www.googleapis.com/auth/drive,https://sites.google.com/feeds/,https://www.googleapis.com/auth/gmail.settings.sharing,https://www.googleapis.com/auth/gmail.settings.basic,https://www.googleapis.com/auth/contacts.other.readonly,https://www.googleapis.com/auth/calendar,https://www.google.com/m8/feeds/,https://www.googleapis.com/auth/contacts

Works every time.

Answer 2

Have you found a solution for this? I have the same issue and have through the same documents multiple times.

Answer 3

Make sure you've followed the instructions to add API permissions on Google side: https://learn.microsoft.com/en-us/exchange/mailbox-migration/perform-g-suite-migration#enable-api-usage-in-your-project

Answer 4

I am getting the same error (not 100% resolved yet).
I did however get past the error you're getting. I'm doing a GWorkspace to M365 Migration using the gmail migration tool in Exchange online.
I can't upload the screenshot because the upload tool's not working but when you get to the step "Automate the configuration of your Google Workspace for migration", once it's finished doing it's 4 setup steps there's a link it gives you and a ClientId and a Scope you need to manually add into Google admin. Once I did that I stopped getting that error you're receiving when running the PS "Test-MigrationServerAvailability" command.

Answer 5

@Amit Badgujar

It seems that the service account configured in the Google Console doesn’t have enough permissions to perform a migration.

Please check whether service account is configured correctly and contain all necessary scopes.

References about how to troubleshoot the issue:
“Client Is Unauthorized To Retrieve Access Tokens Using This Method.” G Suite Migration Error
Error: Cannot connect to Calendar API: Unauthorized Client. Client is unauthorized to retrieve access tokens using this method

References about how to perform a Google Workspace (formerly G Suite) migration:
Perform a Google Workspace (formerly G Suite) migration
Migrate consumer Google Workspace (formerly G Suite) mailboxes to Microsoft 365 or Office 365
G Suite to Office 365 Migration: A Step-By-Step Guide from Our Pros

---

If an Answer is helpful, please click "Accept Answer" and upvote it.
Note: Please follow the steps in our documentation to enable e-mail notifications if you want to receive the related email notification for this thread.