Error
Invalid administrative credentials for Google discovery. Username: user@domain.com, Domain: domain.com: Cannot connect to Admin API - Users (denied) Failed.
Cause
This error occurs during the autodiscovery of items for a Google tenant, because the administrator account specified in the endpoint is not an administrator account in the Google tenant or the API Scopes needed to connect to GSuite have not been properly set up.
Resolution
- Ensure that the domains and admin for the GSuite side have been added to your Source endpoint settings
- Verify that OAuth has the needed API scopes have been set up for your GSuite tenant as per the following guide: Enable access to G Suite (IMAP) using OAuth 2.0
More information on the prerequisites for using Autodiscover can be found in How do I Autodiscover the items for my migration?