403 PERMISSION_DENIED for Google One AI Premium subscriber - account correctly identified but API access blocked

What happened?

I'm a Google One AI Premium subscriber. The Gemini CLI correctly identifies my subscription tier as "Gemini Code Assist in Google One AI Pro", but all API requests are blocked with 403 PERMISSION_DENIED. No tokens are consumed — requests are rejected before processing.
Error Output
json
[{
"error": {
"code": 403,
"message": "The caller does not have permission",
"errors": [
{
"message": "The caller does not have permission",
"domain": "global",
"reason": "forbidden"
}
],
"status": "PERMISSION_DENIED"
}
}]
/stats Output

Auth Method: Signed in with Google
Tier: Gemini Code Assist in Google One AI Pro
Tool Calls: 0 ( ✓ 0 x 0 )
Success Rate: 0.0%

Model Reqs Input Tokens Cache Reads Output Tokens
gemini-2.5-flash-lite 1 0 0 0
Key Observations

• ✅ OAuth authentication succeeds
• ✅ Subscription tier is correctly identified as AI Pro
• ❌ All API calls return 403 PERMISSION_DENIED
• ❌ 0 input tokens, 0 output tokens — requests are rejected before processing
• ❌ Same issue affects the VS Code Gemini extension
• ❌ Previously returned 429 RESOURCE_EXHAUSTED, now escalated to 403 Forbidden
  Timeline

1. Started experiencing 429 RESOURCE_EXHAUSTED errors several days ago
2. Contacted Google One support — they investigated and confirmed it's an API/OAuth issue
3. Google One support stated: "After coordinating with our specialist team, we confirmed that issues related to Gemini CLI and OAuth access (including VS Code extension behavior) should be handled by the Google Cloud support team, as these are developer tools and services not covered by Google One support."
4. Attempted to create a support case via Google Cloud Console — received "You do not have permission to create support cases" (no paid Cloud support plan)
5. Error has now escalated from 429 to 403 PERMISSION_DENIED
   Suspected Cause
   My account appears to have been falsely flagged by an abuse detection system. Google One support specifically mentioned that the Google Cloud team should check whether my account has been flagged by their abuse detection system and investigate any restrictions on CLI or API usage.
   The Support Dead-End
   As a consumer subscriber, I'm stuck in a loop:

• Google One support says this is a Google Cloud issue
• Google Cloud support requires a paid support plan I don't have
• I'm a paying AI Premium subscriber who cannot use the service I'm paying for
  Environment
• Subscription: Google One AI Premium (Pixel verified member)
• CLI version: latest
• OS: macOS
• Model: gemini-3.1-pro-preview (also tested with gemini-2.5-flash-lite)
• Affected tools: Gemini CLI, VS Code Gemini extension
  Request
  Please investigate whether my account has been incorrectly flagged by an abuse detection system and restore normal API/OAuth access. My subscription is active and correctly recognized, but API permissions are being denied at the server level.

What did you expect to happen?

I expected the Gemini CLI to work normally with my Google One AI Premium subscription. API requests should succeed and return valid responses, as my subscription tier is correctly identified as "Gemini Code Assist in Google One AI Pro ".

Client information

> /about
# paste output here

Login information

Signed in with Google Account (OAuth) via Google One AI Premium subscription (Pixel verified member).

Anything else we need to know?

1. This issue started as 429 RESOURCE_EXHAUSTED errors and has now escalated to 403 PERMISSION_DENIED.

2. I contacted Google One support. They confirmed the issue and stated it should be handled by the Google Cloud support team. However, as a consumer subscriber, I cannot create Google Cloud support cases (no paid Cloud support plan).

3. Google One support specifically mentioned that my account may have been flagged by an abuse detection system and recommended the Cloud team investigate.

4. I'm stuck in a support dead-end: Google One says it's a Cloud issue, Cloud requires a paid plan. As a paying subscriber, I cannot get help from either side.