OAuth permissions

Expected Behavior

clasp login should grant access to the app script API.

Actual Behavior

1. That’s an error. Error: admin_policy_enforced

Access to your account data is restricted by policies within your organization. Please contact administrator for more information.

Request Details access_type=offline scope=https://www.googleapis.com/auth/script.deployments https://www.googleapis.com/auth/script.projects response_type=code client_id=xxxxxxxxxx-xxxxx.apps.googleusercontent.com redirect_uri=http://localhost:60194 That’s all we know.

Steps to Reproduce the Problem

I’m trying to use the clasp tool as a G-Suite user, and I have enabled Apps Script API at https://script.google.com/home/usersettings

But the clasp login is giving the above error inside the browser. While our G-Suite Administrator is willing to change the required policies/permissions, he couldn’t find any documentation on how to grant the access rights needed for clasp tool or Error logs on what permission was missing.

Can somebody help us figure out what needs to be done to enable the API access to use the clasp tool?

Specifications

• Node version 8.9.1
• Version : @google/clasp@1.1.5
• OS Windows

[imthenachoman]

Is there anyway to get the App ID added to some kind of official Google approved documentation? Many organizations have super tight security requirements and can’t/won’t authorize random App IDs they see in source code files. They need to see something official saying that is the App ID so there is accountability. Something that shows 1072944905499-vm2v2i5dvn0a0d2o4ca36i1vge8cvbn0.apps.googleusercontent.com belongs to Google for clasp and that Google’s privacy policy applies.

[grant]

For admin-restricted domains, you can have your admin whitelist clasp by following the instructions here: https://support.google.com/a/answer/7281227

To do this, you click the “Trusted Apps” link in that section of the UI, and then add a trusted app, selecting “Web App” and pasting in the clasp client ID 1072944905499-vm2v2i5dvn0a0d2o4ca36i1vge8cvbn0.apps.googleusercontent.com

Let me know if that works.