[!] Google Api Error: Invalid request - The caller does not have permission when uploading Android App bundle on MacOS about fastlane

[sitting-duck]

Here is the fastlane env output:

$ fastlane env
[✔] 🚀 
[13:57:19]: fastlane detected a Gemfile in the current directory
[13:57:19]: However, it seems like you didn't use `bundle exec`
[13:57:19]: To launch fastlane faster, please use
[13:57:19]: 
[13:57:19]: $ bundle exec fastlane env
[13:57:19]: 
[13:57:19]: Get started using a Gemfile for fastlane https://docs.fastlane.tools/getting-started/ios/setup/#use-a-gemfile
[13:57:21]: Generating fastlane environment output, this might take a few seconds...
swift-driver version: 1.62.15 <details><summary>✅ fastlane environment ✅</summary>

### Stack

| Key                         | Value                                                   |
| --------------------------- | ------------------------------------------------------- |
| OS                          | 12.6.1                                                  |
| Ruby                        | 3.1.2                                                   |
| Bundler?                    | false                                                   |
| Git                         | git version 2.19.0                                      |
| Installation Source         | /usr/local/Cellar/fastlane/2.211.0/libexec/bin/fastlane |
| Host                        | macOS 12.6.1 (21G217)                                   |
| Ruby Lib Dir                | /usr/local/Cellar/ruby/3.1.2_1/lib                      |
| OpenSSL Version             | OpenSSL 1.1.1s  1 Nov 2022                              |
| Is contained                | false                                                   |
| Is homebrew                 | true                                                    |
| Is installed via Fabric.app | false                                                   |
| Xcode Path                  | /Applications/Xcode.app/Contents/Developer/             |
| Xcode Version               | 14.1                                                    |
| Swift Version               | 5.7.1                                                   |


### System Locale

| Variable | Value       |   |
| -------- | ----------- | - |
| LANG     | en_US.UTF-8 | ✅ |
| LC_ALL   |             |   |
| LANGUAGE |             |   |


### fastlane files:

<details><summary>`./fastlane/Fastfile`</summary>

```ruby
# This file contains the fastlane.tools configuration
# You can find the documentation at https://docs.fastlane.tools
#
# For a list of all available actions, check out
#
#     https://docs.fastlane.tools/actions
#
# For a list of all available plugins, check out
#
#     https://docs.fastlane.tools/plugins/available-plugins
#

# Uncomment the line if you want fastlane to automatically update itself
# update_fastlane

default_platform(:android)

platform :android do
  desc "upload internal build to google play store"
  lane :deploy do
    upload_to_play_store
  end
end

`./fastlane/Appfile`

# app_identifier("[[APP_IDENTIFIER]]") # The bundle identifier of your app
# apple_id("[[APPLE_ID]]") # Your Apple Developer Portal username


# For more information about the Appfile, see:
#     https://docs.fastlane.tools/advanced/#appfile
#
json_key_file("pc-api-5388874122748755929-382-3edf7cf6fb7b.json")
package_name("com.nothing.game.gelwix")

fastlane gems

Gem	Version	Update-Status
fastlane	2.211.0	✅ Up-To-Date

Loaded fastlane plugins:

No plugins Loaded

Loaded gems

Gem	Version
error_highlight	0.3.0
did_you_mean	1.6.1
atomos	0.1.3
rexml	3.2.5
CFPropertyList	3.0.5
claide	1.1.0
colored2	3.1.2
nanaimo	0.3.0
xcodeproj	1.22.0
rouge	2.0.7
xcpretty	0.3.0
terminal-notifier	2.0.0
unicode-display_width	1.8.0
terminal-table	1.8.0
plist	3.6.0
public_suffix	5.0.0
addressable	2.8.1
multipart-post	2.0.0
word_wrap	1.0.0
optparse	0.1.1
tty-screen	0.8.1
tty-cursor	0.7.1
tty-spinner	0.9.3
artifactory	3.0.15
babosa	1.0.4
colored	1.2
highline	2.0.3
commander	4.6.0
excon	0.94.0
faraday-em_http	1.0.0
faraday-em_synchrony	1.0.0
faraday-excon	1.1.0
faraday-httpclient	1.0.1
faraday-multipart	1.0.4
faraday-net_http	1.0.1
faraday-net_http_persistent	1.2.0
faraday-patron	1.0.0
faraday-rack	1.0.0
faraday-retry	1.0.3
ruby2_keywords	0.0.5
faraday	1.10.2
unf_ext	0.0.8.2
unf	0.1.4
domain_name	0.5.20190701
http-cookie	1.0.5
faraday-cookie_jar	0.0.7
faraday_middleware	1.2.0
fastimage	2.2.6
gh_inspector	1.1.3
json	2.6.1
mini_magick	4.11.0
naturally	2.2.1
rubyzip	2.3.2
security	0.1.3
xcpretty-travis-formatter	1.0.1
dotenv	2.8.1
bundler	2.3.11
simctl	1.6.8
jwt	2.5.0
uber	0.1.0
declarative	0.0.20
trailblazer-option	0.1.2
representable	3.2.0
retriable	3.1.2
mini_mime	1.1.2
memoist	0.16.2
multi_json	1.15.0
os	1.1.4
signet	0.17.0
googleauth	1.3.0
httpclient	2.8.3
webrick	1.7.0
google-apis-core	0.9.1
google-apis-playcustomapp_v1	0.12.0
google-apis-androidpublisher_v3	0.31.0
google-cloud-env	1.6.0
google-cloud-errors	1.3.0
google-cloud-core	1.6.0
google-apis-iamcredentials_v1	0.16.0
google-apis-storage_v1	0.19.0
rake	13.0.6
digest-crc	0.6.4
google-cloud-storage	1.44.0
emoji_regex	3.2.3
jmespath	1.6.1
aws-partitions	1.660.0
aws-eventstream	1.2.0
aws-sigv4	1.5.2
aws-sdk-core	3.167.0
aws-sdk-kms	1.59.0
aws-sdk-s3	1.117.1
set	1.0.2
forwardable	1.3.2
logger	1.5.0
pathname	0.2.0
shellwords	0.1.0
cgi	0.3.1
date	3.2.2
timeout	0.2.0
stringio	3.0.1
securerandom	0.1.1
uri	0.11.0
openssl	3.0.0
digest	3.1.0
io-nonblock	0.1.0
ipaddr	1.2.4
io-wait	0.2.1
zlib	2.1.1
resolv	0.2.1
time	0.2.0
open-uri	0.2.0
mutex_m	0.1.1
net-protocol	0.1.2
net-http	0.2.0
ostruct	0.5.2
english	0.7.1
erb	2.2.3
strscan	3.0.1
abbrev	0.1.0
io-console	0.5.11
tempfile	0.1.2
delegate	0.2.0
fileutils	1.6.0
tmpdir	0.1.2
base64	0.1.1
singleton	0.1.1
open3	0.1.1
nkf	0.1.1
prettyprint	0.1.1
pp	0.3.0
find	0.1.1
yaml	0.2.0
psych	4.0.3

```

I will look into how easy it is to make a PR for the fastlane documentation soon, I'm not sure if this is something I can do myself or if I have to collaborate with others.

[saminBee]

Gave admin access but still the same error

[fastlane-bot]

It seems like you have not included the output of fastlane env
To make it easier for us help you resolve this issue, please update the issue to include the output of fastlane env 👍

[francardoso93]

I'd like to know which are the minimal required permissions

[llmagicll]

same issue here since I updated JDK to 19

[edwinsmasher]

Gave admin access but still the same error
How did you resolve it? Gave access about 4 days ago but still getting the error

[edwinsmasher]

@saminBee How did you resolve the issue? I gave Admin access to the user about 4 days ago but its still throwing the error

[saminBee]

@edwinsmasher The problem I was facing was that I had been using a different Gmail account. Therefore, I have given the owner access to that email. First, give your mail ownership access to the play console. Then download the json_key.

go to your service account, give grant access to the email

Followed this doc: https://docs.fastlane.tools/getting-started/android/setup/

[CryZo]

Maybe this will help someone else: I got this error because I only granted admin rights to the app that this key is used to deploy. However, I had to grant admin rights to the entire account.

[XxQuickSilverZz]

Vielleicht hilft das jemand anderem: Ich habe diese Fehlermeldung erhalten, weil ich der App, für deren Bereitstellung dieser Schlüssel verwendet wird, nur Administratorrechte gewährt habe. Allerdings musste ich dem gesamten Konto Administratorrechte gewähren.

how exactly did you come across this site? Link?

[CryZo]

I can't post the link, as it contains ids. However, it's the same site you use to add your service account. Just select "Users and Permissions" in the sidebar, click on the service account you've added before and you're there.

[ASemeniuk]

Does the Google Cloud project have to be created by the owner of Google Developer project, or it can be an unrelated account?
I fail to understand the relationship between Developer console project and Cloud project (aside from inviting service account to the Developer console), and the documentation is a bit vague on this matter.

UPDATE: Found the answer myself. For anyone interested: it does not matter which Google Cloud Project (on which account) you use - as long as the service account is given the necessary permissions via the Google Play Developers console

[S26T]

Try to this solution

1. Go to Google Cloud Console and copy name of service account. Example [email protected]
2. Go to Users and Permission in Google Play Console and add new user with full access
   2.1. use service account name how email for access