Below is a checklist of what to review in order to resolve this error:
1. Verify the Credential Type and Scopes
-
OAuth2 Credentials:
Make sure that the credentials in n8n include the required scopes. For Google Sheets updates, you typically need:
-
Service Account Credentials:
If you’re using a Service Account, confirm that you’ve enabled domain-wide delegation. Also, the spreadsheet must be shared with the service account’s email address—not just your own.
For additional details on checking and setting up delegation, refer to the “Finish your n8n credential” section in the Google Service Account documentation in n8n.
2. Double-Check API Enablement
Even though you mentioned the Sheets API is enabled, verify that:
- You’re using the correct project (the one that the n8n credential is referencing).
- If your workflow accesses files on Drive, the Drive API may also need to be enabled.
3. Confirm Credential Ownership and Sharing Permissions
- When using OAuth2, ensure that the account you signed in with (and whose credentials you’re using) has been granted editing permissions on the target spreadsheet.
- For a Service Account, be sure to share the spreadsheet with the email address associated with the service account.
4. Review the OAuth Redirect URL
If an OAuth redirect URL is misconfigured or missing from your Google Cloud project’s credentials, Google may reject the token exchange request. Verify that your redirect URL from n8n is properly added to your Google Cloud Console under Authorized Redirect URIs.
By going through these steps, you should be able to identify what might be causing the “Forbidden - perhaps check your credentials? The caller does not have permission” error. If the error persists, recheck each step carefully, particularly the configured scopes and whether the used account has the correct access rights.
Hope this helps resolve your issue!