Oauth Causing More permissions problems - google-apps-script

Question

I've been working to solve this issue for months and it is just getting worse.
I have a simple program in Google Apps script that grabs email addresses from a sheet and puts them in the appropriate Google Contacts group. It was working fine up until a month or so ago when it stopped working.
Please help me:
1) Understand If I really need to work with API's to do what I'm doing.
2) Check my work below for something I might be missing.
Original Problem:
When I run this code i get the error: "You do not have permission to perform that action."
function testAddEmail(){
ContactsApp.createContact(null, null, "tomfoolery#validemailaddress.com");
};
To resolve this issues I've:
-Made sure Contacts API is enabled in my Cloud Console.
-Disabled and reinabled it multiple times.
-Created a new file with the program and enabled new Contacts API.
-Created Credentials for the new program (It worked for one day after this).
-Contacted Google Cloud Support and G Suite Support to make sure settings are correct (they don't support script or contacts.)
Problem 2:
I've tried to add the Oauth 2 code but now it gives me the error "You do not have permission to call getActiveSpreadsheet."
Are their problems in my Oauth 2 code below? (I removed my personal info.)
function getContactsService() {
// Create a new service with the given name. The name will be used when
// persisting the authorized token, so ensure it is unique within the
// scope of the property store.
return OAuth2.createService('contacts')
// Set the endpoint URLs, which are the same for all Google services.
.setAuthorizationBaseUrl('https://accounts.google.com/o/oauth2/auth')
.setTokenUrl('https://accounts.google.com/o/oauth2/token')
// Set the client ID and secret, from the Google Developers Console.
.setClientId('blablabla.apps.googleusercontent.com')
.setClientSecret('blablabla')
// Set the name of the callback function in the script referenced
// above that should be invoked to complete the OAuth flow.
.setCallbackFunction('authCallback')
// Set the property store where authorized tokens should be persisted.
.setPropertyStore(PropertiesService.getUserProperties())
// Set the scopes to request (space-separated for Google services).
.setScope('https://www.google.com/m8/feeds')
.setScope('https://www.googleapis.com/auth/spreadsheets')
// Below are Google-specific OAuth2 parameters.
// Sets the login hint, which will prevent the account chooser screen
// from being shown to users logged in with multiple accounts.
.setParam('login_hint', Session.getActiveUser().getEmail())
// Requests offline access.
.setParam('access_type', 'offline')
// Forces the approval prompt every time. This is useful for testing,
// but not desirable in a production application.
.setParam('approval_prompt', 'force');
}

Answer 1

Are you logged into multiple Google accounts? That often causes issues with authorization. Try logging out of everything and logging back in to just one account.
Is this running on a trigger or are you manually running the formulas?
Are the owner of the spreadsheet and logged in as the owner? Are you running this test in the spreadsheet's container-bound script?
If you're the owner of the spreadsheet and you're just adding the email addresses from your own spreadsheet to your own Gmail account then there's no reason you need to use the API or OAuth protocol.
As another commenter mentioned, what are the scopes you're requesting? To just set up a simple script from your spreadsheet to add contacts you probably just need the two you listed. You can set them manually by selecting view-->show manifest file. For example:
{
"timeZone": "America/New_York",
"dependencies": {
},
"oauthScopes": [
"https://www.googleapis.com/auth/script.container.ui",
"https://www.googleapis.com/auth/spreadsheets"
]
}