I'm trying to fetch a user from [Google Directory API](https://developers.google.com/admin-sdk/directory/) with the following request:

```
Collection<String> SCOPES = Arrays.asList("https://www.googleapis.com/auth/admin.directory.user.readonly", "https://www.googleapis.com/auth/admin.directory.user");
URL url = getClass().getResource("privatekey.p12");
GoogleCredential credential = new GoogleCredential.Builder()
    .setJsonFactory(request.getJsonFactory())
    .setServiceAccountId("foobar.com")
    .setServiceAccountScopes(SCOPES)
    .setTransport(new NetHttpTransport())
    .setServiceAccountUser("foo@bar.com")
    .setServiceAccountPrivateKeyFromP12File(new File(url.getPath())).build();
Directory dir = new Directory.Builder(GoogleNetHttpTransport.newTrustedTransport(), request.getJsonFactory(), credential)
    .setApplicationName(request.getApplicationName())
    .build();

```

But I'm getting the following error from the API:

```
Caused by: com.google.api.client.auth.oauth2.TokenResponseException: 400 Bad Request
{
  "error" : "access_denied",
  "error_description" : "Requested scopes not allowed: https://www.googleapis.com/auth/admin.directory.user https://www.googleapis.com/auth/admin.directory.user.readonly"
}

```

I've checked the scopes are correct, anyone know what's the problem here?