Postman 403 Error Code Issues when using Google Ads

Google Cloud Integration Services
1

I created new credentials in Google Developer Console for Google Ads base URL : https://googleads.googleapis.com/v14/customers. and added the scope: https://www.googleapis.com/auth/adwords .

For Postman I performed the following steps in my Google Ads workspace :

  1. Added Client Id and Client Secret to the variables portion of the Google Ads collection.
  2. Set the token name
  3. set the grant type = ‘Authorization Code’
  4. Callback URL = https://oauth.pstmn.io/v1/browser-callback
  5. Auth URL = https://accounts.google.com/o/oauth2/v2/auth
  6. Access Token URL = https://oauth2.googleapis.com/token
  7. Scope = https://www.googleapis.com/auth/adwords
  8. Refresh token (default) = https://oauth2.googleapis.com/token

When I click Access New Token, I get the redirect page requesting me to choose an account. So I choose my google account and allow oauth.pstmn.io to access my google account (This is postman browser) .

The token generation fails with the message below (note that I have already successfully done token generation with credentials used for DFA Reporting for Campaigns, Sites, and Ads in GCM 360):

However the result is that I get is an “invalid client”. How could that be since I created the client in Google Developer Console and copied those over to Postman? Thanks
Here are the error slides:

UnsuccessfulPostman_Token_Generation.png
UnsuccessfulPostman_Token_Generation.png735×484 19 KB

UnsuccessfulPostman_Token_Generation2.png
UnsuccessfulPostman_Token_Generation2.png1334×219 40.1 KB

UnsuccessfulPostman_Token_Generation3.png
UnsuccessfulPostman_Token_Generation3.png627×240 8.78 KB

Restricted Scopes AdWords
Restricted Scopes AdWords559×678 37.9 KB

2
  1. Make sure that the client gives you a developer token
  2. Make sure that your scope is non-Sensitive or, if the scope is sensitive, has been approved by Google Developer Team to allow the API to access data.

You need both of these to make this work. I was so swayed by the results of the dfareporting scope working for Campaign Manager 360 that I completely forgot the importance of scope sensitivity. Now I’ll have to tell the client they must wait anywhere from 3 - 5 days for approval.