403 PERMISSION_DENIED on Gemini CLI for valid Google One AI Pro account (Code Assist activated, all local fixes attempted)

Gemini API
1

Problem

Gemini CLI consistently returns 403 PERMISSION_DENIED (“The caller does not have permission”) for every prompt, while the same Google account works perfectly on web Gemini and Antigravity IDE.

Environment

  • OS:​ Windows
  • CLI version:​ latest (freshly reinstalled via npm install -g @google/gemini-cli@latest)
  • Node.js:​ (please fill in your version, run node -v)
  • Account email:​
  • Subscription:​ Google One AI Pro (active, paid plan confirmed on codeassist.google.com)
  • Network egress IP:​ 168.158.125.3 (US, Arizona)

Error Details

  • Endpoint:​ https://cloudcode-pa.googleapis.com/v1internal:streamGenerateContent?alt=sse
  • Status:​ 403 Forbidden
  • Error message:​ The caller does not have permission
  • Reason:​ forbidden
  • Status code:​ PERMISSION_DENIED

Trace IDs

  • f63fec6f43d395d2 (2026-04-28 08:40:30 GMT)
  • 3c0381784abdbefa (2026-04-28 12:51:11 GMT)

What Works

What Fails

  • Gemini CLI: :cross_mark: every prompt returns 403

Troubleshooting Already Attempted

  • Cleared ~/.gemini, %LOCALAPPDATA%\google-gemini, %APPDATA%\google-gemini
  • Uninstalled and reinstalled @google/gemini-cli@latest
  • Cleared npm cache
  • Removed third-party app authorization at myaccount.google.com/permissions
  • Logged out of all Google accounts in browser, re-authenticated CLI from scratch
  • Confirmed correct cached account via /about (reginaldiantico@gmail.com)
  • Unset all GOOGLE_* and GEMINI_* environment variables
  • Verified network egress IP is in US (Arizona) via ipinfo.io
  • Confirmed Code Assist is activated (paid plan) at codeassist.google.com
  • Confirmed account is a personal account (not Workspace-managed)

Important Note

I have never used any third-party tools, reverse proxies, or shared my account credentials. This appears to be an entitlement / authorization issue on the backend, similar to #24533 and #24517.

Request

Please investigate the entitlement state for my account using the trace IDs above and restore Gemini CLI access for my Google One AI Pro subscription.