Google multiple service account same mount permission & limits

What is the problem you are having with rclone?

i have confusion if impersonate uses the impersonating accounts limits or not.

so, i have setup multiple GSA that do not use impersonate thinking i will have multiple upload limits of 750GB (?as using impersonate with multiple service accounts will use the impersonated account limit of a single 750GB?).

problem being (when not using impersonate) if a file is uploaded via GSA-01 then GSA-02 can read that file but not delete it

Nov 13 13:02:13 middle-earth rclone[28903]: P1380200.MOV: File.Remove file error: googleapi: Error 403: The user does not have sufficient permissions for this file., insufficientFilePermissions
Nov 13 13:02:13 middle-earth rclone[28903]: P1380200.MOV: >Remove: err=googleapi: Error 403: The user does not have sufficient permissions for this file., insufficientFilePermissions

What is your rclone version (output from rclone version)

v.1.51 (just hangs on delete)
v1.54.0-beta.4893.ceeac84cf (gives rm: cannot remove '02-gdrive-rw/P1380200.MOV': Input/output error)

Which OS you are using and how many bits (eg Windows 7, 64 bit)

Ubuntu 18.04.5 LTS, VM

Which cloud storage system are you using? (eg Google Drive)

Google Drive

The command you were trying to run (eg rclone copy /tmp remote:tmp)

/usr/bin/rclone mount gdrive-02-rw:www/cache_testing /media/rclone/02-gdrive-rw --uid=5007 --gid=5005 --umask=007 --allow-other --sysl --log-level=DEBUG --config=/root/.config/rclone/rclone-gdrive-02-rw.conf

The rclone config contents with secrets removed.

[gdrive-02-rw]
type = drive
scope = drive
#client_id = xyz
service_account_file = /root/.config/rclone/rclone-gdrive-02-xyz-service-account-rw.json
use_trash = false
skip_gdocs = true
shared_with_me = true
acknowledge_abuse = true
root_folder_id = xyz

A log from the command with the -vv flag

Nov 13 13:02:13 middle-earth rclone[28903]: P1380200.MOV: File.Remove file error: googleapi: Error 403: The user does not have sufficient permissions for this file., insufficientFilePermissions
Nov 13 13:02:13 middle-earth rclone[28903]: P1380200.MOV: >Remove: err=googleapi: Error 403: The user does not have sufficient permissions for this file., insufficientFilePermissions

SOLVED: For anyone else who comes across this, was buried in parts over other threads

It is possible for one account to delete files from another account if it is in a "Shared drive" and NOT a "Shared folder" worded as team drive in rclone

The account which is unable to delete files must be shared as a "Manager" not "Content Manager"

[gdrive-02-rw]
type = drive
scope = drive
service_account_file = /root/.config/rclone/rclone-gdrive-02-xyz-service-account-rw.json
use_trash = false
skip_gdocs = true
#shared_with_me = true
#client_id = xyz
#impersonate = not_needed@email.com
acknowledge_abuse = true
team_drive = xyz

This topic was automatically closed 60 days after the last reply. New replies are no longer allowed.