Skip to main content
Question

Credentials for Pub/Sub not working


Forum|alt.badge.img+2

Hello,

Despite deleting everything and trying it twice from scratch following this doc, we keep getting this error:

Your Google service account credentials do not have permission to create a Google Cloud Pub/Sub topic. 

We have done everything by the books, I have no idea, why this doesn’t work.

 

Any ideas, please?

Thanks,

16 replies

Forum|alt.badge.img

When you were creating the service account, the first screenshot mislead you. You should have added pub/sub admin. You have to re-create your service account.


Forum|alt.badge.img
  • New Member
  • 2 replies
  • February 19, 2023

Not working.

I did everything 5 times. Still gives that error

Google Topic IDs: Your Google service account credentials do not have permissions to access the Google Cloud Pub/Sub API. Refer to this guide for more information.

 

Somebody can write here step by step what we gonna do? 

 

Thank you


Forum|alt.badge.img
  • New Member
  • 2 replies
  • February 19, 2023
Fatmir Matarova wrote:

When you were creating the service account, the first screenshot mislead you. You should have added pub/sub admin. You have to re-create your service account.

 i did everyting in document. Is there anything not exist in doc what should we do?


zhaivoronok
Forum|alt.badge.img+5
  • Helper
  • 5 replies
  • February 19, 2023

Same here, also waited over 36 hours as it said in the warning in docs. Still getting that β€˜not have permission to create’ error.


zhaivoronok
Forum|alt.badge.img+5
  • Helper
  • 5 replies
  • February 19, 2023

Sorry, figured out that I set role β€œCloud Pub/Sub Service Agent”. Setting β€œPub/Sub Admin” fixed the issue.


Forum|alt.badge.img+7
  • Dedicated Contributor
  • 62 replies
  • February 21, 2023

Hey Houman,

I know you mentioned you did it all by the book, but did you set the role correctly for the service account, and wait the 36 hours?

If you are you still facing this issue. If so, you may want to reach out to support: https://app.revenuecat.com/settings/support


Forum|alt.badge.img+2
  • Author
  • New Member
  • 3 replies
  • February 27, 2023

Yes, I did everything by the book. The problem is not the 36 hours, I waited for 4 days.

The problem is your documentation that is inaccurate. (Sorry)

  1. As the documentation says pick the role for Cloud Pub/Sub Service Agent.
  2. Finish everything as the documentation says until the end. The last sentence in the 400 error paragraph says: β€œensure you've enabled Pub/Sub for your project in our guide here.”
  3. Click on that to enable your Pub/Sub capability for your account. 
  4. From here the documentation lacks the next step. Now you need to go back to the roles and change β€œCloud Pub/Sub Service Agent” to β€œPub/Sub Admin”. This option simply doesn’t exist at first in the drop down, because your Pub/Sub API is not yet enabled. 
  5. Only then you can go back to RevenueCat and press the connect button. Now it will be green.

 


hello Houman,

Can you solve that ?


Forum|alt.badge.img+3
  • New Member
  • 3 replies
  • August 22, 2024

I have the same issue. I enabled Pub/Sub Admin and have waited for more than 36 hours and have also enabled the Cloud Pub/Sub API and still doesn’t work. Any one know how to resolve this?


Forum|alt.badge.img
  • New Member
  • 2 replies
  • December 22, 2024

Same issue. I did everything, waited more than 36 hours but nothing has changed. 


kaitlin
RevenueCat Staff
Forum|alt.badge.img+6
  • RevenueCat Staff
  • 391 replies
  • December 27, 2024

Hey all, 

Our documentation did briefly recommend using the β€œCloud Pub/Sub Service Agent” role but this was incorrect and has been removed. The two roles assigned to your service account must be β€œPub/Sub Admin” and β€œMonitoring Viewer”.

The Pub/Sub API does not need to be enabled for your credentials to validate, but there’s no harm in enabling it and you’ll need to do so if you want to set up Google Developer notifications.

Additionally, the 36 hours is a recommendation but we have unfortunately seen it take longer. If it’s been quite a few days and you’re still seeing issues, it could be worth starting the guide from scratch again. 

 

Some other things to consider are that if you make any changes to the key file before adding it to RevenueCat (for example, renaming the file), this could cause issue. Additionally, if you’re seeing that only the β€œSubscriptions API” permission is not checked, try going forward with your testing - we have also seen a test purchase be needed to finish validating the credentials.


Forum|alt.badge.img
  • New Member
  • 2 replies
  • December 28, 2024

 This issue has been resolved by waiting more than 36 Hours (about 4 -5 days) as 

as kaitlin said

 


  • New Member
  • 1 reply
  • April 10, 2025
kaitlin wrote:

Our documentation did briefly recommend using the β€œCloud Pub/Sub Service Agent” role but this was incorrect and has been removed. The two roles assigned to your service account must be β€œPub/Sub Admin” and β€œMonitoring Viewer”.

I think there’s been a regression in your documentation - because it currently says β€œPub/Sub Editor” instead of β€œPub/Sub Admin”. I had to change from Editor to Admin for things to work.


guilherme
RevenueCat Staff
Forum|alt.badge.img+1
  • RevenueCat Staff
  • 14 replies
  • April 14, 2025

Hey ​@db888,

Thanks for flagging! I just had a look into this and the change in our documentation is intentional.

I think there’s been a regression in your documentation - because it currently says β€œPub/Sub Editor” instead of β€œPub/Sub Admin”. I had to change from Editor to Admin for things to work.

 

We did some testing internally and having the role assigned as Pub/Sub Editor should work as expected - as the permissions that are required are covered by it, we realised we could make this change from Pub/Sub Admin. However, to make sure it all works correctly, the credentials should be validated first!

Do let us know if you see this not being the case and you face any misbehaviours with the role.


Forum|alt.badge.img+2

Hi, I’m also running into the same issue. My credentials are validated and I’ve followed all the steps and double checked that my topic pub/sub in google console also has the Pub/Sub Admin revenue cat service account.

However, when sending the test notification from google play console, I’m seeing
 

Test notification couldn't be sent

Make sure you've entered the topic name in the correct format, Google Cloud is set up correctly, and that you have the required permissions

 

Could it be that I have to wait longer? 


guilherme
RevenueCat Staff
Forum|alt.badge.img+1
  • RevenueCat Staff
  • 14 replies
  • April 21, 2025

Hey ​@grant-jaffarian-bd43f4,

From our side, I can confirm the credentials are valid and I can also see some errors happening on the 15th (looked like permission issues creating the Pub/Sub topic) which then turned into a successful set of requests. That’s a good sign that your credentials and setup are now in a good state!

Could you confirm that all is working on your side and that you were able to send a test notification from the Play Console?

Also, just to double check, did it only start working once you gave the Pub/Sub Admin role, or were you using Pub/Sub Editor when it started working? Both should technically work, but curious if you noticed any difference.

Let me know how it’s going!


Cookie policy

We use cookies to enhance and personalize your experience. If you accept you agree to our full cookie policy. Learn more about our cookies.

 
Cookie settings