error 403: Your client does not have permission to get URL in python google cloud module

user_15415267 0
Viewed 1980

UPTADE: According to what our system expert told me, they fixed the problem as follows: v6 ips must be disabled in the operating systems they are in.

I have a python file on the server that is scheduled to run every week. like this:

from google.cloud import bigquery
gbq_credentials = create_gc_credentials(settings)
client = bigquery.Client(credentials=gbq_credentials,project=project_id)
df = client.query(sql_query).to_dataframe()

#data processing
....

But the file that works every week, gave an error today:

Error 403 (Forbidden)!!1
Your client does not have permission to get URL <code>/bigquery/v2/projects/xxxx/jobs</code> from this server.

when I run the same file on my local computer, I didn't get any errors.

I updated the outdated python libraries on the server. But it didn't work. Also I get the same error on all files using the google cloud module.

What could this problem be caused by ?

google-bigquery server google-cloud-platform python
2 Answers

It could be for many reasons. You can consider these options:

  • This error can be caused due to cache, and erasing the cache sometimes might help to fix it.
  • You may just need to restart the server.
  • You are not allowed to access the resource, or there’s an error on the server side.
  • The owners of the web server have improperly set up permissions, and you’re getting denied access when you really shouldn’t be.

Or

When using the BigQuery API, you need to create the client with OAuth credentials for the user. For access with an API, this is often a Service Account identity. When you create a Service Account, that account is not automatically added a membership role to your project. To update the users and service accounts that are members of your project, go to your project, select "Permissions" in the navigation panel, and make sure the user or service account identity you are calling with is a "Reader" on the project.

In case it is about permissions, you can see this documentation about it.

user_169291450

How does the "create_gc_credentials" work? From the error message, the service account running on the server does not have the permission.

user_8154860
Related