How do I fix the “OAuth application doesn’t have required scopes” error for Google Admin Console backup?

This error (BGOOGAP982) occurs when the OAuth app configured for Google Admin Console backup is missing one or more required scopes. To resolve it, add the required scopes in Google Cloud and then refresh/reconnect the cloud connection so the updated permissions are granted. 

Step 1: Sign in to Google Cloud Console using an admin account. 
 
Step 2: Select the Google Cloud project where your OAuth app was created. 
 


Step 3: Go to APIs & Services -> Credentials 

 
 

 

 
Step 4: Select the Client ID you want to update 



 
Step 5: Select the Data Access tab on the left panel and click Add or remove scopes. 
 



Step 6: Add the required Google Admin Console scopes (ensure all are selected), then click Update. 

Add these scope URLs: 

• https://www.googleapis.com/auth/admin.directory.orgunit 
• https://www.googleapis.com/auth/admin.directory.group.readonly 
• https://www.googleapis.com/auth/admin.directory.rolemanagement 
• https://www.googleapis.com/auth/admin.directory.group.member.readonly 
• https://www.googleapis.com/auth/admin.directory.device.mobile.action 
• https://www.googleapis.com/auth/admin.directory.device.chromeos 
• https://www.googleapis.com/auth/admin.directory.domain 
• https://www.googleapis.com/auth/admin.directory.resource.calendar 
• https://www.googleapis.com/auth/admin.directory.user 
• https://www.googleapis.com/auth/admin.directory.user.alias 
• https://www.googleapis.com/auth/admin.directory.customer 
• https://www.googleapis.com/auth/admin.directory.userschema 
• https://www.googleapis.com/auth/apps.groups.settings 
• https://www.googleapis.com/auth/admin.directory.device.mobile 

 

Step 7: Click Save and continue until the consent screen changes are saved. 

Step 8: Return to the backup status page in the SysCloud application and confirm the backup resumes in the next backup cycle.