Error: "TokenResponseException (400 Bad Request - "invalid_grant" - "Invalid email or User ID")"

Google Workspace backups fail with the error message, "400 Bad Request" - "invalid_grant" - "Invalid email or User ID".

Environment

• Datto SaaS Protection 2.0 for Google Workspace

Cause

This error occurs when a backup attempts to start for any Google 2.0 service that no longer has a matching user in Google Workplace. While this service should (and usually does) archive itself within 24 hours, sometimes, the service will stay active and report as a failed backup.

Resolution

Follow the workflow described in Uninstall a Marketplace app for your organization to remove the SaaS Protection application from the impacted environment. Then, perform the workflow How do I set up a new Backupify for Google Workspace account? to re-add the app to the organization. Attempt the backup again.