As much as we try to make sure everything works seamlessly, sometimes things happen that Data Sync cannot automatically resolve.

We have compiled a list of the most common errors you might encounter while using the Data Sync Google Classroom integration and how you can resolve them.

Login or Authentication Errors

Error 400: admin_policy_enforced

Sign in Error:

If you see either of these errors when you attempt to log into Data Sync, it is an authentication error due to your Google Workspace not trusting the Data Sync Client ID.

In order to resolve this, you will need to be a Google Workspace Super Admin and go to this page: https://admin.google.com/ac/owl/list and click "Add App", then select "OAuth App Name or Client ID" and then enter in this ID:

732534304649-jeikivcnsoji6i6nc23quft7dev29ba3.apps.googleusercontent.com

After you have added and approved this app, you should be able to successfully authenticate with Data Sync.

System Errors

These errors prevent Data Sync from updating your Google Classroom.

Failed Precondition: Joining User Not Enabled for Roster Import

  • The Roster Import setting is not enabled for Data Sync for your Google Domain or OU. Please have your Google Workspace Super administrator visit the Google Admin Console to select ON-Kimono under Roster Import. To navigate to Roster Import, go to Apps > Google Workspace > Settings for Classroom > Roster Import.

403 Forbidden: insufficient permissions

  • Data Sync does not have the proper permissions to update your Google Classroom. This can happen if the user that has authenticated Data Sync with Google isn’t a Super Admin. Please ensure that the user that has authenticated with Google is a Super Administrator has logged into Data Sync and accepted ALL the appropriate permissions on the Google OAuth Consent page.

400 Bad Request: invalid_grant

  • The token Data Sync uses to update Google Classroom has expired. This typically is automatically resolved by Data Sync. In the case where this message persists, please logout of Data Sync from the Profile page, and sign back in to force a new token to be generated.

IO_ERROR: null

  • The Roster Import setting is not enabled for Data Sync for your Google Domain or OU. Please have your Google Workspace Super administrator visit the Google Admin Console to select ON-Kimono under Roster Import. To navigate to Roster Import, go to Apps > Google Workspace > Settings for Classroom > Roster Import.

Sync Issues

These issues typically occur for a single task rather than all tasks. Some of these errors are automatically retried to ensure the most seamless sync experience.

@UserCannotOwnCourse: Please check that the user account exists.

  • The integration is attempting to create a course where the primary teacher does not exist in your Google Workspace.

  • This task will automatically attempt to resolve itself after every subsequent sync.

  • Please make sure all of your teachers have an account in Google Workspace, and that their emails are correct.

@CourseNotModifiable: The course is not in a state that allows modification of its properties

  • The course the Integration is attempting to update is in an Archived State. You must restore this course to ensure the updated data is synchronized with Google Classroom.

@CannotDirectAddUser: Unable to directly add the user to the course

  • This error occurs when a user (student, teacher, or co-teacher) is not present in Google Workspace domain, or the email for the user does not match the user in Google Workspace.

  • Make sure the email is correct in your SIS and that the user exists in Google Workspace.

  • This task will automatically attempt to resolve itself after every subsequent sync.

@UserAccountSuspended The user account specified in the request is suspended

  • This occurs when the user’s record in Google Workspace has been suspended, but is still active in your SIS data. If the user was inadvertently suspended in Google Workspace, you may safely reactivate them.

  • If this was intentionally suspended then you should verify your data in the SIS to ensure this user is removed from the data source as well.

@ClassroomDisabled The user is not permitted to access Classroom

  • The Google Classroom sync was unsuccessful because the Google Classroom service is disabled for the Super Admin connected to Data Sync. Make sure your Super Admin has enabled the Classroom service. You can read more about this here: Control user access to Classroom

Did this answer your question?