What’s changing
Earlier this year, we launched the ability to configure third-party apps by select API scopes to open beta. Beginning today, this feature is now generally available.
This update gives admins more granular control. They can limit third-party app access to specific OAuth 2.0 scopes for Google APIs, like Drive or Gmail. This prevents apps from gaining additional access without admin consent, even if they request new API scopes in the future. This helps ensure data access is restricted to only what admins deem necessary.
Getting started
- Admins: To manage app access, in the Admin console navigate to Security > API Controls > App Access Controls. Visit the Help Center to learn more about controlling which third-party & internal apps access Google Workspace data.
Rollout pace
- Rapid and Scheduled Release domains: Gradual rollout (up to 15 days for feature visibility) December 3, 2024
Availability
- Available to all Google Workspace customers, as well as Cloud Identity Free and Premium customers
