CARVIEW

MOTORHOMES

Select Language

HTTP/2 200 strict-transport-security: max-age=86400; includeSubDomains content-type: text/html; charset=UTF-8 expires: Mon, 14 Jul 2025 22:08:58 GMT date: Mon, 14 Jul 2025 22:08:58 GMT cache-control: private, max-age=0 last-modified: Mon, 14 Jul 2025 21:45:39 GMT etag: W/"a8f36daaf5a645b254e912af627abacec8ccc895257bff14fb0213315577c4d7" content-encoding: gzip x-content-type-options: nosniff x-xss-protection: 1; mode=block content-length: 37910 server: GSE alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Google Workspace Updates: Granular OAuth consent in Google Apps Script IDE executions

arrow_back Back

January 8, 2025

Granular OAuth consent in Google Apps Script IDE executions

What’s changing

Google offers a wide variety of APIs that Google Apps Script developers can use to build features for Google users. The data access that these APIs can reference is governed by the OAuth scopes of each Workspace application, which users are required to authorize before a script can run. Historically, the OAuth consent screen has asked the user to authorize all of the necessary OAuth scopes to run a given script.

This screenshot shows the current OAuth consent screen, which requires the user to authenticate all or none of the requested OAuth scopes.

This screenshot shows the old OAuth consent screen, which requires the user to authenticate all or none of the requested OAuth scopes.

Starting today, the OAuth consent screen will now let users specify which individual OAuth scopes they would like to authorize. For example, if a script requests access to a user’s Sheets and Forms files, and the users only intends to use the script with Sheets files, they can decide to only allow access to their spreadsheets and not their forms. This affords users the benefit of more granular control over what data their 3P applications are allowed to access.

This screenshot shows the new OAuth consent screen, which lets the user provide consent for a subset of the requested OAuth scopes.

Additional details

To complement the release of this new consent flow, we’re also adding methods to the ScriptApp and AuthorizationInfo classes that let Apps Script developers programmatically interact with the scopes granted for a script. Refer to the developer documentation for more information.

After a user grants permission to a script, Apps Script might request OAuth consent again in the following cases:

The user, who has granted consent to a subset of the requested OAuth scopes, tries to run a part of the script that was not previously authorized.
The script is updated in such a way that it requires permission for additional scopes.
The user revoked access to the script from their Google Account settings.

All past execution failures will be logged in the execution history. Each OAuth failure will contain a hyperlink that users can use to provide the permissions that were missing.

Getting Started

Admins: There is no admin control for this feature.
Developers and end users:

Granular OAuth consent is only available for scripts that have finished migrating to the V8 runtime. If you would like to utilize granular consent on one of the few remaining Rhino scripts, you can manually migrate to V8 by following these instructions.
This new consent screen will only be used for new OAuth scope grants. Pre-existing scope grants will not be affected, so no action is required by users on scripts they’ve already authorized.
The new consent screen will be launched first to the Apps Script IDE (i.e. executing a script directly from Apps Script). The consent screen will launch to the remaining surfaces in the future:

Google Ads Script
Macro executions
Trigger executions
Web app executions
API Executions
Chat apps
Add-ons

Rollout pace

Rapid Release and Scheduled Release domains: Extended rollout (potentially longer than 15 days for feature visibility) starting on January 8, 2025, with expected completion by January 24, 2025

Availability

Available to all Google Workspace customers and Workspace Individual Subscribers

Resources

Useful Links

Join the official community for Google Workspace administrators

In the Google Cloud Community, discuss the latest features with Googlers and other Google Workspace admins like you. Learn tips and tricks that will make your work and life easier. Be the first to know what's happening with Google Workspace.

Learn about more Google Workspace launches

On the “What’s new in Google Workspace?” Help Center page, learn about new products and features launching in Google Workspace, including smaller changes that haven’t been announced on the Google Workspace Updates blog.

Learn about our customers

Discover how a diverse range of organizations, from small businesses and nimble startups to globally recognized Fortune 500 corporations, leverage the collaborative power of Google Workspace. Explore examples of how teams of are streamlining workflows and driving productivity by utilizing Google-Workspace.

Original Source | Taken Source