@UserCannotOwnCourse 无法在 Google Classroom 中创建课程

Question

我所拥有的：

• 服务帐户
• 已创建域委派（服务帐户的 ID）和 google 课堂权限
• 创建了一个管理员帐户（[电子邮件受保护])
• 尝试创建一门模拟管理员帐户
• Google for education 工作区

的课程问题：为什么我收到 @UserCannotOwnCourse 错误？

我的代码：

服务帐户 jwt：

function getAuthServiceAccount(dominio, impersonateEmail) => {
    return new Promise( async (resolve, reject) => {
        let credentials = getCredentials();
        const jwtParams = {
            email : credentials.client_email,
            key   : credentials.private_key,
            scopes : [
                ////// drive
                'https://www.googleapis.com/auth/drive.file',
                'https://www.googleapis.com/auth/drive',
                'https://www.googleapis.com/auth/drive.metadata',
                'https://www.googleapis.com/auth/drive.appdata',
                'https://www.googleapis.com/auth/drive.apps.readonly',
                'https://www.googleapis.com/auth/drive.metadata.readonly',
                'https://www.googleapis.com/auth/drive.photos.readonly',
                'https://www.googleapis.com/auth/drive.readonly',
                ///// classroom
                'https://www.googleapis.com/auth/classroom.courses.readonly',
                'https://www.googleapis.com/auth/classroom.courses',
                'https://www.googleapis.com/auth/classroom.profile.emails',
                'https://www.googleapis.com/auth/classroom.profile.photos',
                'https://www.googleapis.com/auth/classroom.rosters',
                'https://www.googleapis.com/auth/classroom.coursework.me',
                'https://www.googleapis.com/auth/classroom.coursework.me.readonly',
                'https://www.googleapis.com/auth/classroom.coursework.students',
                'https://www.googleapis.com/auth/classroom.coursework.students.readonly',
                'https://www.googleapis.com/auth/classroom.announcements',
                'https://www.googleapis.com/auth/classroom.announcements.readonly',
                'https://www.googleapis.com/auth/classroom.topics',
                'https://www.googleapis.com/auth/classroom.topics.readonly',
                /////// admin directory
                'https://www.googleapis.com/auth/admin.directory.customer',
                'https://www.googleapis.com/auth/admin.directory.customer.readonly',
                'https://www.googleapis.com/auth/admin.directory.domain',
                'https://www.googleapis.com/auth/admin.directory.domain.readonly',
                'https://www.googleapis.com/auth/admin.directory.orgunit',
                'https://www.googleapis.com/auth/admin.directory.orgunit.readonly',
                'https://www.googleapis.com/auth/admin.directory.user',
                'https://www.googleapis.com/auth/admin.directory.user.alias',
                'https://www.googleapis.com/auth/admin.directory.user.alias.readonly',
                'https://www.googleapis.com/auth/admin.directory.user.readonly',
                'https://www.googleapis.com/auth/admin.directory.user.security',
                'https://www.googleapis.com/auth/admin.directory.userschema',
                'https://www.googleapis.com/auth/admin.directory.userschema.readonly',
                'https://www.googleapis.com/auth/admin.directory.group',
                'https://www.googleapis.com/auth/admin.directory.group.member',
                'https://www.googleapis.com/auth/admin.directory.group.member.readonly',
                'https://www.googleapis.com/auth/admin.directory.group.readonly',
                'https://www.googleapis.com/auth/admin.directory.rolemanagement',
                'https://www.googleapis.com/auth/admin.directory.rolemanagement.readonly',
                'https://www.googleapis.com/auth/admin.reports.audit.readonly'
            ]
        };
        if(impersonateEmail) {
            jwtParams.subject = impersonateEmail;
        }
        const jwtClient = new google.auth.JWT(jwtParams);
        jwtClient.authorize(function (err, tokens) {
            if (err) {
                return resolve(false);
            } else {
                jwtClient.dominio = dominio;
                return resolve(jwtClient);
            }
        });
    });
};

创建课程：

function create_course(auth, courseName, room, ownerEmail) {
    return new Promise( async (resolve, reject) => {
        const classroom = google.classroom('v1');
        const data = {
            auth : auth,
            resource : {
                name        : courseName,
                section     : room,
                room        : room,
                ownerId     : ownerEmail,
                courseState : 'ACTIVE'
            }
        };
        classroom.courses.create(data, async (err, response) => {
            if(err) {
                return resolve({msj : `Error!!!`, err : err});
            }
            return resolve({msj : 'course created!', id : response.data.id, code : response.data.enrollmentCode });
        });
    });
}

调用：

let ownerEmail = '[email protected]'; // << NOT the admin email I'm impersonating with

const _AUTH = await getAuthServiceAccount('mydomain.edu', '[email protected]'); // << email to impersonate (subject)
let res = await create_course(_AUTH, 'Math', 'Room 123', ownerEmail);

我收到此错误：

{
    code: 403,
    message: '@UserCannotOwnCourse Please check that the user account exists. If you are attempting to create a course for another user, ensure that you are admin of their domain.',
    errors: [ 
{
    message: '@UserCannotOwnCourse Please check that the user account exists. If you are attempting to create a course for another user, ensure that you are admin of their domain.',
    domain: 'global',
    reason: 'forbidden'
  } 
],
    status: 'PERMISSION_DENIED'
  }

这确实是管理员：

注意：这适用于具有完全相同配置的另一个工作区，事实上在我管理的许多工作区中这有效，这是我第一次收到此错误。