G Suite user sync logs

How to interpret G Suite user sync logs, what do different error messages mean and how to resolve issues.

Happeo provides automatic user sync from G Suite. This sync may sometimes experience errors, which may be temporary or longer lasting. This article will help you to understand the most common problems and instruct how to fix them.

Google errors

Google errors are errors that originate from Google. They are usually caused by sync admin not having permissions to read specific user information from Google or Happeo being uninstalled accidentally for the domain. Below is the list of example errors, reasons and resolutions.

UNAUTHORIZED

com.google.api.client.googleapis.json.GoogleJsonResponseException: 401 UNAUTHORIZED { "code" : 401, "errors" : [ { "domain" : "global", "location" : "Authorization", "locationType" : "header", "message" : "Login Required", "reason" : "required" } ], "message" : "Login Required"}

Possible reasons:

  • The sync account does not exist anymore.
  • The sync account does no longer have the necessary admin permissions in G Suite
  • Happeo has been uninstalled.

Resolutions:

  • Verify that the sync admin exists and is not suspended
  • Verify that the sync admin has permissions to read user profiles & Organisation Units in G Suite admin permissions
  • Verify that Happeo has been installed from G Suite admin panel
  • Verify that the Admin is in an OU which has Happeo installed

FORBIDDEN - RESOURCE/API

com.google.api.client.googleapis.json.GoogleJsonResponseException: 403 FORBIDDEN{ "code" : 403, "errors" : [ { "domain" : "global", "message" : "Not Authorized to access this resource/api", "reason" : "forbidden" } ], "message" : "Not Authorized to access this resource/api"}

Possible reasons:

  • The sync account has no access to the user it’s trying to update. This can happen for example when the sync account has been moved to another organizational unit in G Suite or the user has been moved to an organizational unit not accessible by the sync account.
  • Happeo has been uninstalled.

Resolutions:

  • Verify that Happeo has been installed from G Suite admin panel
  • Verify that the Admin is in an OU which has Happeo installed

FORBIDDEN - QUOTA

com.google.api.client.googleapis.json.GoogleJsonResponseException: 403 FORBIDDEN{ "code" : 403, "errors" : [ { "domain" : "usageLimits", "message" : "Request rate higher than configured.", "reason" : "quotaExceeded" } ], "message" : "Request rate higher than configured."}

Possible reasons:

  • There were too many user updates at the same time and Google refused to serve this one to Happeo.

Resolutions:

  • You can try to update the user manually again after a few minutes.

NOT_FOUND

com.google.api.client.googleapis.json.GoogleJsonResponseException: 404 NOT_FOUND{ "code" : 404, "errors" : [ { "domain" : "global", "message" : "Resource Not Found: userKey", "reason" : "notFound" } ], "message" : "Resource Not Found: userKey"}

Possible reasons:

  • This seems to happen when the user cannot be found anymore from G Suite. The user has probably been deleted from G Suite.

Resolutions:

  • As of now, contact support.

Internal errors

Internal errors are errors that originate in Happeo. These are usually caused by user primary email being converted into a group or vice versa, or deleted user re-provisioned to the organisation. Below is the list of example errors, reasons and resolutions.

INTERNAL_TEMPORARY_ERROR

This error should be a temporary error. You can try to update the user manually again after a few minutes.

INTERNAL_CONFLICT_ERROR

There is an internal conflict in Happeo’s system. Contact support.

UNKNOWN_ERROR

This is an unknown error. Contact support.