Set up API access

Page Summary

Accessing the Data Manager API requires a Google Cloud project and a Google Account with the necessary permissions.
The Data Manager API must be explicitly enabled in your Google Cloud project settings.
Authentication for the Data Manager API can be set up using various methods, including user accounts and service accounts, with Application Default Credentials recommended for automatic credential finding.
Setting up access involves configuring Google Auth Platform settings and potentially undergoing Google OAuth verification for user accounts accessing sensitive scopes.
After authentication, grant the operating account email access to the desired Destination, following specific instructions for Google Ads or Display & Video 360 accounts.
The final step involves setting up the SDK for your preferred programming language (REST, .NET, Java, Python, Node.js, PHP) by downloading, installing, and configuring the relevant libraries.

Here's how to set up access to the Data Manager API with an SDK or REST.

Choose the type of setup process you want to follow:

Prerequisites

Before you can use the Data API, make sure you have the following:

A Google Cloud project.
A Google Account that has the serviceusage.services.enable permission on your Google Cloud project, or has a role that includes that permission. For example, roles/owner and roles/serviceusage.serviceUsageAdmin both include the serviceusage.services.enable permission. To check your permissions, see View current access.
The Google Cloud command line interface installed.

Enable the API

If you haven't already, enable the Data Manager API by clicking Enable the Data Manager API or follow the instructions to perform this step manually.

If you can't find the Data Manager API or Enable the Data Manager API fails, verify your Google Account meets the prerequisites.

Set up authentication

You can use any of the Authentication methods at Google besides API keys. We recommend reviewing how to Choose the right authentication method for your use case to decide which approach is appropriate for your use case.

Two common authentication methods are user accounts and service accounts:

User accounts: Represent people who interact with Google APIs and services directly.
Service accounts: Represent apps, not people, as the users. They let your apps manage authentication and authorization. For example, if an app needs to access Google Cloud resources.

Your integration can use Application Default Credentials (ADC) to automatically find credentials from the environment so you don't have to change the client code to authenticate.

Choose User account or Service account impersonation to set up ADC:

Here are the steps to authenticate with user account credentials:

Configure the Google Auth Platform settings for your project.

Important: Any Google Cloud app used to obtain user credentials for the Data Manager API scope must undergo Google OAuth verification to avoid an unverified UI screen for its users. Google OAuth verification isn't required for service accounts.
1. Open the Branding page in the Google Cloud Console.
2. Select your project.
3. Fill out the form and click Create.
Since the Data Manager API scope is a sensitive scope, the following steps are required:
1. Go to the Data Access settings for your project.
2. Click Add or remove scopes.
3. Check the box next to Data Manager API in the list of scopes, and click Update.
4. Click Save.
5. Go to Audience in the Google Cloud Console and update the Publishing status and User type. Learn more about these settings in Manage App Audience.
Click Create OAuth2 client to create an OAuth2 client in the project, or follow the instructions to create a Desktop OAuth2 client. You can skip this step if you already have a Desktop OAuth2 client that you want to use for the Data Manager API.

If you click Create OAuth2 client, select Desktop app when prompted to Configure your OAuth client so you can use the client in the remaining steps.

Create OAuth2 client
In the last step, click DOWNLOAD CLIENT CONFIGURATION and note the download location you choose.

Generate a local ADC file by running the following command. This command launches a web flow where you are prompted to login to the Google Account you're using with the API.

Replace PATH_TO_CLIENT_JSON with name of the JSON file you downloaded.

gcloud auth application-default login \
  --scopes="https://www.googleapis.com/auth/datamanager,https://www.googleapis.com/auth/cloud-platform" \
  --client-id-file="PATH_TO_CLIENT_JSON"

If you want to use the same credentials for the Data Manager API and the Google Ads API, include the Google Ads API scope in the --scopes list:

gcloud auth application-default login \
  --scopes="https://www.googleapis.com/auth/datamanager,https://www.googleapis.com/auth/adwords,https://www.googleapis.com/auth/cloud-platform" \
  --client-id-file="PATH_TO_CLIENT_JSON"

If you want to use the same credentials for the Data Manager API and the Display & Video 360 API, include the Display & Video 360 API scope in the --scopes list:

gcloud auth application-default login \
  --scopes="https://www.googleapis.com/auth/datamanager,https://www.googleapis.com/auth/display-video,https://www.googleapis.com/auth/cloud-platform" \
  --client-id-file="PATH_TO_CLIENT_JSON"

Confirm credentials are setup correctly using the following command. If successful, the command prints an access token to the console.
```
gcloud auth application-default print-access-token
```

To learn more about authentication and credentials for your app, see Authentication methods at Google and How Application Default Credentials works.

Set up account access

Grant the email associated with your user account access to the Destination.

If using a Google Ads account, follow the instructions to add the email of the user to the Google Ads account or a parent Google Ads manager account.
If using a Display & Video 360 account, follow the instructions to add the email of the user to the account.
If using a Google Analytics property, follow the instructions to add the email of the user to the account.

Next steps

Install a client library and run code samples to try your first Data Manager API request.

Install a client library