401 "The caller does not have permission" Error Authorizing a Google Drive Connection in Workflows

{
"error": {
"code": 401,
"message": "The caller does not have permission",
"errors": [
{
"message": "Active session is invalid. Error code: 4",
"domain": "global",
"reason": "authError",
"location": "Authorization",
"locationType": "header"
}
],
"status": "PERMISSION_DENIED"
}
}

Cause

This error can occur if the Google Drive and Docs Service is turned off for the Google Workspace service user used for file ingestion.

Solution

In the Google Admin Console:

1. Navigate to Apps > Google Workspace > Drive and Docs.
2. Click on Service status.
3. Check to see if the service is disabled for the service user.
   1. Note that the service can be turned on/off for all users or specific users based on Groups or Organizational Units.
   2. Ensure the service is enabled for the user and attempt to reauthorize the connection.
   3. If the OU the service user is a member of does not have the Drive and Docs service enabled, you may need to add the service user to a Google Security Group that should overrides those OU settings.