Error with facebook API Marketing request - facebook-graph-api

I have a problem with facebook API Marketing when I try to do this post request: act_ad_account_ID/users
I try to give to another user an analyst access to account, but it returns me error: (#10) Application does not have permission for this action
It happens only with one account, great number of other accounts works fine. All permissions of application are set correctly.
Cant find any description of this error. Could you please help me?
Updated:
Found that the error occurs when the ad account belongs to the partner, even if the admin role in the ad account.
So I have a question: Is there a way to add a advertiser to the add account of the partner of business owner? If I have all permissions of owner account?

Related

Unable to Retry Immediately in GCP for pub/sub Service Accounts

I am new to GCP pub/sub and am trying to get everything setup. I am facing a permission error when creating a subscription topic. Does anyone know what I am missing in my steps, or how to resolve? Here is what I have done so far.
Add roles, Service Account Admin and Service Account Key Admin
Created Service Account (completed the full flow)
Tried to create a subscription topic <-- this is where I am receiving an error.
Here is the error at a closer look.
UPDATE: After receiving some comments, it seems my issues are all related to roles and permissions. The problem is that I do not know which roles/permissions work.
I am able to create a subscription topic so long that I do NOT enable authentication and add a service account. Since my original post, I have added these other additional permissions: Pub/Sub Admin, Service Account Admin, Service Account Key Admin, Service Account Token Creator, Service Account User.

Google Calendar API - Service Account - Impersonate User

I have some difficulty to make work impersonate user with service account on Google Calendar API.
For give service account right on calendar, i created calendar with SA account for give it the full access rights.
I'm trying to add an event with any user of domain.
I'm setting to $client with impersonate user :
putenv("GOOGLE_APPLICATION_CREDENTIALS=JSON_CREDENTIAL_SA_FILE);
$client = new Google_Client();
$client->useApplicationDefaultCredentials();
$client->authorize();
$client->addScope([Google_Service_Calendar::CALENDAR]);
$client->setSubject(EMAIL USER TO IMPERSONATE);
But when i'm trying to add an events
$event = new \Google_Service_Calendar_Event($EventObj);
$event = $service->events->insert($AgendaID, $event);
GG Api return is "A service error occurred | reason:NotFound", it seems that user used can't found SA calendar ID.
Calendar ID ids not share with user used.
In Google Cloud Plateform, i created the service account and add delegation domain checkbox.
On IAM panel, email of service account is Owner. I gave to user used in my project role Service Account Token Creator or owner to try but same issue like describe here
On Google Admin, I gave to ID Service Account Scope needed in Security => API Command => https://www.googleapis.com/auth/calendar
I was thinking that when using setSubject, it's like using SA but like a user.
Insert work if i comment $client->setSubject(EMAIL USER TO IMPERSONATE);
I really don't understand why can't used any user of domain to write on SA Calendar.
Did i miss a configuration on google cloud plateform or google admin ?
Thanks for your help.

What are the GCP AIM permissions needed in order for an user to reply to users reviews on Google Workspace Marketplace

I need to provide some permissions to an user in order to reply to
the reviews on Google Workspace Marketplace, however when following a "Reply to user reviews" documentation I found, it says that I need to provide the Project Editor access to this user just for her to be able to reply to these reviews. As you could imagine, I can't do that otherwise this user will have an excess of unnecessary permissions, which could be dangerous.
What I need
Is there any way that I can provide just the necessary permissions for any user to reply to reviews? Is there any way to create a Custom Role on GCP IAM? If so, what are the necessary granular permission should I give?
Thanks in advance
For a user to reply to users reviews on Google Workspace Marketplace you need the basic.editor or basic.owner permission
You can find this information in the documentation:
To reply to a review, you must have basic.editor or basic.owner permission on the app's Google Cloud project. Follow the below steps to reply to a review.

Google Analytics Reporting API service account issues

I've been trying to get data from GA using a service account, however, my issue is that it keeps saying;
Error: User does not have sufficient permissions for this profile.
I have enabled GA reporting API and given access to GA account using the email of the service account. In addition, it was granted "read and analyze" permissions on the account.
Tried this method on a personal account, and everything worked fine, however, when working on a client project, the issue comes back.
What could I be missing?
This was interesting to figure out.
I've used Account ID against one Google Analytics Account and that worked.
For the one I have been having an issue with, I needed to use the View ID.

AWS first login can not find Account ID

I am trying to create a docker on AWS. I have created a an account and now I am stuck on this page:
It asks for account ID and IAM username. I do not know my ID. Where is it?
On AWS docs it says log into your account and go to support center, but the support center login requires this same screen. Please let me know if I am doing something wrong.
Click the Sign-in using root account credentials link on the sign-in page and you will be prompted for an email address and password.
This will login as the Root account, which is all-powerful. In fact, it is so powerful that the recommendation is that you should immediately create a new IAM User, assign it Admin permissions and then never use the Root login again. You can assign Admin permissions by attaching the policy called AdministratorAccess.
While you are in the IAM console, you can create an account alias that you can use when logging in via the screen you have shown. It will also give you a URL you can use to access the correct sign-in page in future.