GSuite UserSync Fails with 403 Error Code
Problem
After configuring UserSync with GSuite, it fails giving the following error message:
- Scheduled with jobid e5c34258-2ef7-4909-b775-5d40a4dd8362
- Building index took 0 milliseconds.
- Fetching users failed - unexpected response code Response{protocol=http/1.1, code=403, message=Forbidden, url=https://www.googleapis.com/admin/directory/v1/users?customer=03i0dhfn&maxResults=100}
- Sync in connector took 464 milliseconds.
- Sync result is FAILED, skipping cleanup.
Solution
There are some possible reasons for that error:
The GSuite user you use to grant the permissions has not the permissions to do so.
In that case, use a GSuite account that has the permissions, like a GSuite admin account.
If you are logged into your personal or another GSuite account in your web browser (e.g. to retrieve your personal Gmail emails), this may interfere when granting the permissions because of cookies.
In that case, you can open a private/incognito window (or use a different browser) and try again to authorize the connector.