Following is the list of scopes required for Google Workspace:
| OAuth Scope | Purpose |
|---|---|
| https://www.googleapis.com/auth/admin.directory.user.readonly | List all users in the Google Workspace account. |
| https://www.googleapis.com/auth/admin.directory.rolemanagement.readonly | List all privileges, role and role assignments. |
| https://www.googleapis.com/auth/admin.directory.orgunit.readonly | List of all organizational units in the Google Workspace account. |
| https://www.googleapis.com/auth/admin.directory.customer.readonly | Get the customer details in the Google Workspace account. |
| https://www.googleapis.com/auth/admin.directory.user.security | List a set of token metadata issued by the user to 3rd Party Apps. |
| https://www.googleapis.com/auth/admin.directory.group.readonly | List all groups in the Google Workspace account. |
| https://www.googleapis.com/auth/admin.reports.audit.readonly | Retrieve changes to various resources in the Google Workspace account. |
| https://www.googleapis.com/auth/admin.directory.device.mobile.readonly | List of all user-owned mobile devices in the Google Workspace account. |
| https://www.googleapis.com/auth/admin.directory.domain.readonly | Lists domains of the customer. |
| https://www.googleapis.com/auth/admin.directory.device.chromeos.readonly | List of Chrome OS devices within the Google Workspace account. |
| https://www.googleapis.com/auth/admin.directory.userschema.readonly | List all schemas for a customer. |
| https://www.googleapis.com/auth/admin.directory.resource.calendar.readonly | List all calendar resources. |
| https://www.googleapis.com/auth/apps.groups.settings | List the settings and permissions of all the groups. |