Requires the Pro tier or above.
Symptom
Creating a shared drive, or moving one between organisational units, fails straight away.
Cause
The cloud-identity.orgunits scope is missing from your service account. Both scopes are required and these two actions have no fallback.
Resolution
Delegate the missing scope to the service account in the Google Admin console. Allow a few minutes afterwards for cached credentials to clear.
Related articles