gemini-cli - 💡(How to fix) Fix OAuth succeeds with Google AI Pro account, but every Gemini CLI request returns 403 PERMISSION_DENIED [2 comments, 3 participants]

Official PRs (…)
ON THIS PAGE

Recommended Tools

×6

Utilities matched from this issue’s tags and category — try them while you read without losing context.

GitHub issue graph ai analysis

Paste a GitHub issue URL. We fetch that issue, discover linked issues from bodies/comments/timeline, collect linked pull requests, and produce a structured English report.

The report is written in English Markdown for sharing and archival.

Helpful · Quick feedback

Loading…
GitHub stats
google-gemini/gemini-cli#24891Fetched 2026-04-09 08:17:48
View on GitHub
Comments
2
Participants
3
Timeline
10
Reactions
0
Author
Timeline (top)
labeled ×3commented ×2subscribed ×2closed ×1

Error Message

Actual error: Exact CLI error text: [API Error: [{ error: {

RAW_BUFFERClick to expand / collapse

Subject: Gemini CLI OAuth succeeds but requests fail with 403 PERMISSION_DENIED

Account:

Environment:

  • OS: Windows 10
  • Shell: Windows PowerShell
  • Gemini CLI version: 0.36.0

What happened:

  1. Gemini CLI was installed successfully on Windows.
  2. OAuth browser sign-in completed successfully.
  3. Gemini CLI stores the login as personal OAuth.
  4. The active Google account is [email protected].
  5. After successful sign-in and restart, even a simple prompt like 1+1 fails.

Current local auth state:

  • settings.json selectedType: oauth-personal
  • google_accounts.json active: [email protected]

Actual error: 403 PERMISSION_DENIED The caller does not have permission

Exact CLI error text: [API Error: [{ error: { code: 403, message: The caller does not have permission, errors: [ { message: The caller does not have permission, domain: global, reason: forbidden } ], status: PERMISSION_DENIED } }]]

What was already tried:

  • Reinstalled and ran Gemini CLI on Windows instead of WSL
  • Cleared local Gemini auth/cache files
  • Re-ran browser OAuth sign-in
  • Confirmed the active account is the paid Google account
  • Restarted Gemini CLI after successful authentication

Expected behavior:

  • A Google AI Pro account should be able to use Gemini CLI after successful OAuth sign-in

Actual behavior:

  • OAuth succeeds, but every request is rejected with 403 PERMISSION_DENIED

Request:

  • Please confirm whether Gemini CLI access is enabled for this Google AI Pro account
  • Please confirm whether any additional entitlement, region, or account verification step is required
  • Please confirm whether this is a backend entitlement issue for Gemini CLI

extent analysis

TL;DR

Verify that the Google AI Pro account has the necessary entitlements and permissions enabled for Gemini CLI access.

Guidance

  • Check the Google Cloud Console to ensure that the Gemini CLI API is enabled for the Google AI Pro account.
  • Confirm with the Google AI Pro account administrator that the account has the required permissions and entitlements for Gemini CLI access.
  • Review the Google AI Pro account settings to see if there are any additional verification steps or region-specific restrictions that may be causing the 403 PERMISSION_DENIED error.

Example

No code snippet is provided as this issue appears to be related to account configuration and permissions rather than code.

Notes

The issue may be related to a backend entitlement issue for Gemini CLI, and further investigation with Google support may be necessary to resolve the issue.

Recommendation

Apply workaround: Verify account entitlements and permissions, as it is likely that the issue is related to a configuration or permission problem rather than a code issue.

Vote matrix · Quick signals

Works
Did the solution work? Tap to confirm.
Easy Fix
Was it a quick fix?
Time Saver
Did it save you time?
Blocking
Was it severely blocking?
Common Issue
Are others likely hitting this too?
Flaky / Intermittent
Is it intermittent?
Verified / Reproducible
Can you reproduce it reliably?
Loading…

Still need to ship something?

×6

Another batch ranked right after the header list — different links, same matching logic.

Back to top recommendations

TRENDING