Google Directory API - エラーの取得権限が不十分です（403）ユーザーのパスワードを更新中

Question

Google Admin SDKを使用してGoogle Directory APIを使用しているユーザーのパスワードを変更しようとしています。ここで

は私のコードです：ここでは

<?php 
require_once __DIR__ . '/vendor/autoload.php'; 


define('APPLICATION_NAME', 'CRONDAQ'); 
define('CREDENTIALS_PATH', '/root/.credentials/admin-directory_v1-php-quickstart.json'); 
define('CLIENT_SECRET_PATH', __DIR__ . '/client_secret.json'); 
// If modifying these scopes, delete your previously saved credentials 
// at ~/.credentials/admin-directory_v1-php-quickstart.json 
define('SCOPES', implode(' ', array(
    Google_Service_Directory::ADMIN_DIRECTORY_USER) 
)); 

if (php_sapi_name() != 'cli') { 
    throw new Exception('This application must be run on the command line.'); 
} 

/** 
* Returns an authorized API client. 
* @return Google_Client the authorized client object 
*/ 
function getClient() { 
    $client = new Google_Client(); 
    $client->setApplicationName(APPLICATION_NAME); 
    $client->setScopes(SCOPES); 
    $client->setAuthConfig(CLIENT_SECRET_PATH); 
    $client->setAccessType('offline'); 

    // Load previously authorized credentials from a file. 
    $credentialsPath = expandHomeDirectory(CREDENTIALS_PATH); 
    if (file_exists($credentialsPath)) { 
    $accessToken = json_decode(file_get_contents($credentialsPath), true); 
    } else { 
    // Request authorization from the user. 
    $authUrl = $client->createAuthUrl(); 
    printf("Open the following link in your browser:\n%s\n", $authUrl); 
    print 'Enter verification code: '; 
    $authCode = trim(fgets(STDIN)); 

    // Exchange authorization code for an access token. 
    $accessToken = $client->fetchAccessTokenWithAuthCode($authCode); 

    // Store the credentials to disk. 
    if(!file_exists(dirname($credentialsPath))) { 
     mkdir(dirname($credentialsPath), 0700, true); 
    } 
    file_put_contents($credentialsPath, json_encode($accessToken)); 
    printf("Credentials saved to %s\n", $credentialsPath); 
    } 
    $client->setAccessToken($accessToken); 

    // Refresh the token if it's expired. 
    if ($client->isAccessTokenExpired()) { 
    $client->fetchAccessTokenWithRefreshToken($client->getRefreshToken()); 
    file_put_contents($credentialsPath, json_encode($client->getAccessToken())); 
    } 
    return $client; 
} 

/** 
* Expands the home directory alias '~' to the full path. 
* @param string $path the path to expand. 
* @return string the expanded path. 
*/ 
function expandHomeDirectory($path) { 
    $homeDirectory = getenv('HOME'); 
    if (empty($homeDirectory)) { 
    $homeDirectory = getenv('HOMEDRIVE') . getenv('HOMEPATH'); 
    } 
    return str_replace('~', realpath($homeDirectory), $path); 
} 

// Get the API client and construct the service object. 
$client = getClient(); 


$service = new Google_Service_Directory($client); 

$password = crypt ("Password", $salt="IamSecretkey"); 

$userObj = new Google_Service_Directory_User(
    array(
     'password' => $password 
    ) 
); 

try{ 
    $results = $service->users->update("danish@XXX.in", $userObj); 
} catch(Error $ex) { 
print_r($ex->getMessage()); 
} 

echo "<pre>"; 
print_r($results); 

は私が取得していますエラーです：

PHP Fatal error: Uncaught exception 'Google_Service_Exception' with message '{ "error": { "errors": [ { "domain": "global", "reason": "insufficientPermissions", "message": "Insufficient Permission" } ], "code": 403, "message": "Insufficient Permission" } }

Answer 1

「十分な権限が」あなたのアカウントがパスワードを変更しようとしていることを示している可能性がありそのような変更を行うために必要な前提条件のロールが他のユーザーとあなたのアカウントにありません。

$client = new Google_Client(); 
    ... 
    ... 
    $client->setScopes(SCOPES); 
    $client->setSubject($impersonate); 

... $ impersonateは "adminWithRolesToMakeChanges@XXX.in"です。役割は管理コンソールで設定します。これが問題だろうか？