Migration from google g suite to office 365 - Error: MigrationPermanentException: The call to https://www.googleapis.com/oauth2/v4/token returned with status code Unauthorized:

Question

Migration from google g suite to office 365 - Error: MigrationPermanentException: The call to https://www.googleapis.com/oauth2/v4/token returned with status code Unauthorized:

Anonymous

Error: MigrationPermanentException -Unauthorized

I have Migration from google g suite to office 365 and when i make sync it issue

User status
Data migrated:
Migration rate:
Last successful sync date:
Error: MigrationPermanentException: The call to https://www.googleapis.com/oauth2/v4/token returned with status code Unauthorized: Unauthorized Error response: unauthorized_client Error description: Client is unauthorized to retrieve access tokens using this method, or client not authorized for any of the scopes requested. --> The call to https://www.googleapis.com/oauth2/v4/token returned with status code Unauthorized: Unauthorized Error response: unauthorized_client Error description: Client is unauthorized to retrieve access tokens using this method, or client not authorized for any of the scopes requested.

0 comments

6 answers

Your answer

Answer 1

Tushar Bhargava 31

Two things to resolve the issue.

Use the Service Account email ID as the endpoint
Add the following scopes in Google Admin > Security > API Controls > Domain-wide Delegation

Works every time.

Mark Johnson 11 Reputation points

2022-05-11T19:25:16.74+00:00

This worked for me, thanks!
Daniel Mourthé 16 Reputation points

2022-07-29T16:47:29.323+00:00

Thank you TusharBhargava-6888!!!

We had been trying to solve it for 7 days and we even received a contact from a Microsoft Support "Specialist", who didn't solve it.

Just need to put a comma after "https://mail.google.com/".
Setting like this *"**https://mail.google.com/,https://www.google.com/m8/feeds,...**"\*\
Nate Soria 0 Reputation points

2025-01-29T17:41:30.2233333+00:00

Worked like a charm... the recommended scopes were off

Answer 2

Jason Gaffney 16

Have you found a solution for this? I have the same issue and have through the same documents multiple times.

41669690 1 Reputation point

2021-09-07T17:21:24.05+00:00

I experienced this same problem and it turned out to be the endpoint associated with the migration. The endpoint you use needs to be the address of the service account you created to facilitate the migration. All I had to do was add the correct endpoint and it worked like a charm.

In Classic exchange admin center, sign in.
On the left click "Recipients".
At the top select the "Migration" tab
Above the batches list you'll see some options like "New', "Edit", "delete", "stop".
Click the 3 dots next to those option and select "migration endpoints"
Select "New"
Select Migration type
Enter in your super Admin email and upload the json file you created for your service account.
On the next page under "Migration endpoint name" enter in the email address of the service account you created.
For max concurrent migrations i set it to 20
max concurrent sync i set to 15
Save and select this new endpoint name when you try your next migration.

Hope this helps

Answer 3

Jimbo Jones 11

I am getting the same error (not 100% resolved yet).
I did however get past the error you're getting. I'm doing a GWorkspace to M365 Migration using the gmail migration tool in Exchange online.
I can't upload the screenshot because the upload tool's not working but when you get to the step "Automate the configuration of your Google Workspace for migration", once it's finished doing it's 4 setup steps there's a link it gives you and a ClientId and a Scope you need to manually add into Google admin. Once I did that I stopped getting that error you're receiving when running the PS "Test-MigrationServerAvailability" command.

Andrew French 0 Reputation points

2023-09-25T12:15:43.07+00:00

This solved the issue for me, its an important step and has to be manually done as said above.

Security>API controls>Domain-wide delegation

Add new

Then copy and paste the info that is given to you in the Exchange automated step.

Answer 4

Vasil Michev 126K MVP Volunteer Moderator

Make sure you've followed the instructions to add API permissions on Google side: https://learn.microsoft.com/en-us/exchange/mailbox-migration/perform-g-suite-migration#enable-api-usage-in-your-project

Amit Badgujar 46 Reputation points

2021-03-26T08:29:42.653+00:00

I already followed all the steps which you mentioned above, but still getting the same issue -

Error: MigrationPermanentException: The call to https://www.googleapis.com/oauth2/v4/token returned with status code Unauthorized: Unauthorized Error response: unauthorized_client Error description: Client is unauthorized to retrieve access tokens using this method, or client not authorized for any of the scopes requested. --> The call to https://www.googleapis.com/oauth2/v4/token returned with status code Unauthorized: Unauthorized Error response: unauthorized_client Error description: Client is unauthorized to retrieve access tokens using this method, or client not authorized for any of the scopes requested.

Answer 5

Emily Du-MSFT 51,986 Microsoft External Staff

@Anonymous

It seems that the service account configured in the Google Console doesn’t have enough permissions to perform a migration.

Please check whether service account is configured correctly and contain all necessary scopes.

References about how to troubleshoot the issue:
“Client Is Unauthorized To Retrieve Access Tokens Using This Method.” G Suite Migration Error
Error: Cannot connect to Calendar API: Unauthorized Client. Client is unauthorized to retrieve access tokens using this method

References about how to perform a Google Workspace (formerly G Suite) migration:
Perform a Google Workspace (formerly G Suite) migration
Migrate consumer Google Workspace (formerly G Suite) mailboxes to Microsoft 365 or Office 365
G Suite to Office 365 Migration: A Step-By-Step Guide from Our Pros

If an Answer is helpful, please click "Accept Answer" and upvote it.
Note: Please follow the steps in our documentation to enable e-mail notifications if you want to receive the related email notification for this thread.

Amit Badgujar 46 Reputation points

2021-03-26T08:28:57.007+00:00

I already followed all the steps which you mentioned above, but still getting the same issue -

Error: MigrationPermanentException: The call to https://www.googleapis.com/oauth2/v4/token returned with status code Unauthorized: Unauthorized Error response: unauthorized_client Error description: Client is unauthorized to retrieve access tokens using this method, or client not authorized for any of the scopes requested. --> The call to https://www.googleapis.com/oauth2/v4/token returned with status code Unauthorized: Unauthorized Error response: unauthorized_client Error description: Client is unauthorized to retrieve access tokens using this method, or client not authorized for any of the scopes requested.
Jihad 1 Reputation point

2021-09-06T12:48:20.337+00:00

have you managed to find a solution for this error message
41669690 1 Reputation point

2021-09-07T17:22:03.987+00:00

I experienced this same problem and it turned out to be the endpoint associated with the migration. The endpoint you use needs to be the address of the service account you created to facilitate the migration. All I had to do was add the correct endpoint and it worked like a charm.

In Classic exchange admin center, sign in.
On the left click "Recipients".
At the top select the "Migration" tab
Above the batches list you'll see some options like "New', "Edit", "delete", "stop".
Click the 3 dots next to those option and select "migration endpoints"
Select "New"
Select Migration type
Enter in your super Admin email and upload the json file you created for your service account.
On the next page under "Migration endpoint name" enter in the email address of the service account you created.
For max concurrent migrations i set it to 20
max concurrent sync i set to 15
Save and select this new endpoint name when you try your next migration.

Hope this helps

Share via

Migration from google g suite to office 365 - Error: MigrationPermanentException: The call to https://www.googleapis.com/oauth2/v4/token returned with status code Unauthorized:

6 answers

Your answer