Forum Discussion
ChromeOS policy sync issue
Have purchased the Trial Chrome upgrade on our existing workspace account.
Our backend api failing with below error:
Request call:
POST https://chromedevicemanagement.googleapis.com/v1/enterprises//devices//devicePolicy
error response:
{
"code" : 400,
"errors" : [ {
"domain" : "global",
"message" : "Device does not have CDM API enabled. Enable CDM API for the corresponding OU in Google Admin Console.",
"reason" : "failedPrecondition"
} ],
"message" : "Device does not have CDM API enabled. Enable CDM API for the corresponding OU in Google Admin Console.",
"status" : "FAILED_PRECONDITION"
}
Can you confirm what this error means?
As same API works for our paid chrome account, is it an restriction on trial accounts from your end? or we are missing something here?
Note: Same client Id and scope is used in Domain-wide delegation setting in admin console.
Hi monika apologies for the delay.
Thanks for sharing the above details. You may have received this error if Chrome Management - Partner Access has not been toggled "On" within the Google Admin Console for the specific group of devices you are trying to manage.
By default, even with a trial, this setting is often disabled for security.
Even if you have enabled the "Chrome Management API" in the Google Cloud Console, you must also authorize "Partner Access" in the Admin Console. Can you try the below steps?
- Log in to the admin.google.com
- Go to Devices > Chrome > Settings > Users & browsers.
- Scroll down to Chrome Management - Partner Access.
- Ensure it is set to Enabled.
- Repeat this for Devices > Chrome > Settings > Device Settings (search for the same "Partner Access" setting there).
Note: Ensure you have selected the correct Organizational Unit (OU) in the left-hand sidebar before saving these settings. If the device is in a sub-OU, it must inherit or explicitly have this enabled.
If this does not resolve things, post back here and there are a few other things we can get you to check in order to get to the bottom of things e.g. let us know how many devices/licenses you are wanting to trial from the 50?
Thanks!
2 Replies
any update here?
Hi monika apologies for the delay.
Thanks for sharing the above details. You may have received this error if Chrome Management - Partner Access has not been toggled "On" within the Google Admin Console for the specific group of devices you are trying to manage.
By default, even with a trial, this setting is often disabled for security.
Even if you have enabled the "Chrome Management API" in the Google Cloud Console, you must also authorize "Partner Access" in the Admin Console. Can you try the below steps?
- Log in to the admin.google.com
- Go to Devices > Chrome > Settings > Users & browsers.
- Scroll down to Chrome Management - Partner Access.
- Ensure it is set to Enabled.
- Repeat this for Devices > Chrome > Settings > Device Settings (search for the same "Partner Access" setting there).
Note: Ensure you have selected the correct Organizational Unit (OU) in the left-hand sidebar before saving these settings. If the device is in a sub-OU, it must inherit or explicitly have this enabled.
If this does not resolve things, post back here and there are a few other things we can get you to check in order to get to the bottom of things e.g. let us know how many devices/licenses you are wanting to trial from the 50?
Thanks!
