HomeDocumentation and Guides
Home

Google Scope Category Changes

A number of improvements to the naming and categorization of Google access scopes are planned for Cisco Cloudlock Apps Firewall. The access scopes categories are used in assessing the risks associated with OAuth applications in your environment. The changes involve more detailed categorization of scopes currently classed as "other". These updates, which are planned to take effect within 30 days from March 18, 2020, are listed below.

👍

Existing Scopes Document

Note that the existing Google Scopes Categories document does not reflect these updates. That documentation will be updated when these changes go into effect.

Scopes Recategorized as Access Inbox or Contacts

Google Access Scope:

Access Scope Name:

  • Portable Contacts API
  • Google Contacts API
  • Google Contacts API
  • Google Contacts API
  • Google Contacts API
  • Google Contacts API
  • Email Settings API
  • Email Settings API
  • Email Migration API
  • Email Migration API
  • Compose Gmail messages
  • Gmail
  • Google Contacts API
  • Google Contacts API
  • Google Contacts API
  • Google Contacts API
  • Contact Groups Feed
  • Google Contacts API
  • Directory API: User Alias
  • Gmail Contextual Gadget
  • Gmail Contextual Gadget
  • Gmail Contextual Gadget
  • Gmail Contextual Gadget
  • Gmail Contextual Gadget
  • Gmail Contextual Gadget
  • Gmail Contextual Gadget
  • Gmail Contextual Gadget
  • Gmail Contextual Gadget
  • Gmail Contextual Gadget
  • Gmail Contextual Gadget
  • Gmail Contextual Gadget
  • Gmail Contextual Gadget
  • Gmail Contextual Gadget
  • Gmail Contextual Gadget
  • Gmail Contextual Gadget
  • Google Contacts API
  • Email Migration API
  • Insert Gmail messages
  • Google Contacts API
  • Email Audit
  • Email Audit API
  • Email Settings API 2.0
  • Gmail IMAP/SMTP Access
  • Google Contacts API
  • Google Contacts API
  • Manage contacts
  • View group subscriptions (admin)
  • Manage user alias (admin)
  • Google Classroom API v1
  • Manage contacts
  • View emails
  • View email with add-on
  • Run Gmail add-on
  • Manage mailbox labels
  • View and modify Email
  • Gmail API v1
  • view Email
  • Manage personal info
  • View profiles and contacts
  • View email address

Scopes Recategorized as Access Personal Information

Google Access Scope:

Scope Name:

  • Google Calendar API
  • Google Calendar API
  • Google Calendar API
  • Google Calendar API
  • Google Calendar API
  • Calendar Resources HTTPS Read Only
  • Google Calendar API
  • Google Calendar
  • Google Calendar
  • Google Calendar API
  • Google Calendar API
  • Google Calendar API: Free/Busy Info
  • Google Apps Reporting API
  • Google Contacts API
  • Google Contacts API
  • Purchases & use of Disney content
  • Google CardDAV API
  • Content API for Shopping v2
  • Fitness v1
  • Fitness v1
  • Fitness v1
  • Fitness v1
  • Fitness v1
  • Fitness v1
  • Google Payments
  • Google Wallet Sandbox
  • Manage your Web History
  • YouTube Data API v3
  • Manage calendars
  • Manage photos and videos
  • Manage calendars
  • Calendar API v3
  • View profile photos
  • Gmail API v1
  • Manage mail settings
  • Gmail API v1
  • Manage mail settings
  • View Google Partners
  • Google+ API: Login Information
  • Login Information
  • View age group
  • View Email Accounts
  • Manage Google Reminders
  • Location info & language prefs
  • Google+ Domains API v1

Scopes Recategorized as Act on behalf of user

Google Access Scope:

Scope Name:

  • Gmail API: Full Access
  • Google Calendar Management
  • Offline Access
  • Gmail API: Send Message
  • Gmail API v1
  • Google Apps Script: Send email
  • Manage Audiences
  • Manage Audiences
  • Google Contacts Management
  • Google Contacts Management
  • Manage Google Actions
  • Manage domain provisioning
  • Manage domain provisioning
  • Manage domain admins
  • Manage Ads Data Hub
  • Manage Google Assistant
  • Manage Calendar events
  • Manage Google Hangouts
  • Manage Classroom topics
  • Manage Cloud Search
  • Manage Google Cloud Datastore
  • Manage Ad Campaigns
  • Manage dialogflow agents
  • Donate nonprofits
  • Approve installation
  • Modify Google Apps Script
  • Manage & message Firebase apps
  • Manage and send emails
  • Gmail API v1
  • Manage Photo Sharing
  • Manage Business Listings
  • Manage Google Apps Scripts
  • Manage Google Apps Scripts
  • Manage domains
  • Import Google Play Music
  • Trends data
  • Manage Voice Commands

Scopes Recategorized as Access Basic info

Scopes Recategorized as Full data access

Google Access Scope:

Scope Name:

  • Google Documents List API
  • Full access to Google Drive documents
  • Google Documents List API
  • Google Documents List API
  • Google Documents List API
  • Full access to Gmail
  • Google Documents List API
  • Google Documents List API
  • Google Documents List API
  • Google Documents List API
  • Full access to Google Drive documents
  • Google Document List API
  • Google Documents List API
  • Google Documents List API
  • Google Documents List API
  • Google Documents
  • Google Documents List API
  • Google Documents List API
  • Full access to Gmail
  • Google Cloud Storage: Full Control
  • Google Cloud Storage
  • Google Documents
  • Google Drive: Forms Management
  • Full access to Gmail account
  • Domain wide Gmail access
  • Google Slides API v1
  • Manage Google Analytics
  • Data transfer administration
  • Manage customer info
  • broad access
  • Manage workers
  • Manage Google Drive
  • Google Drive: Files Management
  • Manage Google Drive
  • Manage Firebase Data
  • Manage Photos library

Scopes Recategorized as Limited access to data and files

Google Access Scope:

Scope Name:

  • Google Code Project Hosting
  • Finance Data API
  • Orkut Application Platform
  • Picasa Web Albums Data API
  • Picasa Web Albums Data API
  • Picasa Web Albums Data API
  • Picasa Web Albums Data API
  • Google Spreadsheets API
  • Google Spreadsheets API
  • Blogger Data API
  • Nicknames Provisioning
  • Nicknames HTTPS Read Only
  • Provisioning API Read Only
  • Finance Data API
  • YouTube
  • Picasa Web Albums Data API
  • Picasa Web Albums Data API
  • Picasa Web Albums Data API
  • Google Sites
  • Access to Google Drive sheets
  • Access to Google Drive sheets
  • Access to Google Drive sheets
  • Google Spreadsheets API
  • Blogger Data API
  • OAuth 1.0 Login
  • OAuth 1.0 Login
  • Google Analytics Core Reporting
  • Google Analytics Core Reporting
  • Google Fusion Tables API
  • Reporting API
  • DoubleClick Ad Exchange Buyer
  • Ad Exchange Seller
  • Ad Exchange Seller
  • Directory API: User Schema
  • Adsense Mgt.
  • AdSense Mgt. Read Only
  • AdSense Host API
  • AdWords API
  • Google Analytics
  • Google Analytics: Edit
  • Google Analytics Management
  • Blogger
  • Blogger Read Only
  • Google Books
  • Google Cloud Deployment
  • Google Cloud Datastore
  • Google Cloud Storage Read Only
  • Google Cloud Storage Write Only
  • DFA Reporting API
  • Google Drive API
  • DoubleClick Search API
  • Google Drive API
  • Drive REST API
  • Google Drive Metadata
  • Google Drive Metadata R/O
  • Goole Apps: Forms Management
  • Freebase API
  • Google Fusion Tables
  • Google Fusion Tables: Read Only
  • Google Play: Games
  • Manage game activity
  • Google Play: Games
  • Google Affiliate Network
  • Gerrit Code Review
  • Directory API: Groups
  • Google+ Hangouts API
  • Google+ Hangouts: Participants
  • Google+ Hangouts: Telephone
  • Google+ Hangouts
  • Check Hangouts status
  • Google Moderator
  • Google Music Manager
  • Orkut
  • Google Picker API
  • Google Picker API
  • Picasa Web Albums Data API
  • Google+ API: Manage Apps
  • Google+ Domains: Read Only
  • Google+: Circles Read Only
  • Google+ Domains: Circles
  • Google+: Media Read Only
  • Google+
  • Google+: Media Upload
  • Google+: photos & videos
  • Google+: Moments
  • Google+
  • Google+: Pages
  • Google+
  • Google+: Photos
  • Google+
  • Google+: Profile Language
  • Google+: Profiles
  • Google+: Settings
  • Google+ Domains: User Stream
  • Google Spreadsheets API
  • Google Spreadsheets API
  • R/O access to Google sheets
  • Google Tasks
  • Google Tasks API
  • YouTube API
  • YouTube Analytics API Read Only
  • YouTube Analytics API Read Only
  • Documents List
  • Manage youtube
  • Manage spreadsheets
  • Manage spreadsheets
  • Manage notifications
  • User Schema Read Only
  • View & manage apps deployed
  • Manage Google Atari Data
  • Manage BrainMaps data
  • View calendar metadata
  • View Calendar events
  • Manage Chrome OS policies
  • Search Cloud Search index
  • View billing accounts
  • Cloud Key Management Service
  • Manage Cloud Platform
  • Cloud Platform services
  • Manage Coding Data
  • Manage Google Wifi & OnHub
  • View and Edit Survey Results
  • Manage corporate itineraries
  • Manage social VR experiences
  • Google Documents
  • Manage Google Dory
  • View Google Drive activity
  • Google Play Game Services
  • View Google Drive apps
  • Manage gLearn
  • View email metadata
  • Gmail API v1
  • Manage Document Access
  • Manage Fiber video
  • Manage Google Now Cards
  • Manage Goro files
  • Manage Google Translator
  • Manage Identity
  • Manage Kintaro content
  • Manage meetings
  • Manage meme votes
  • Manage content on Memegen
  • Manage YouTube Music data
  • Manage Google Partners info
  • Manage One Today Activity
  • Add Photos to Photo Library
  • Manage specific photos
  • Google+ API: Email Address
  • Manage Slides presentations
  • Manage Tailor preferences
  • Manage applications' settings
  • View Google Apps Script
  • Manage Google Play
  • Manage DoubleClick
  • Manage Teams profile
  • Manage online browsing activity
  • View user specific content
  • Manage vouchers
  • Manage 3D creations
  • View Youtube Subscription

Scopes Recategorized as Access location information

Scopes Recategorized as Manage devices

Scopes Recategorized as Manage user activity

Google Access Scope:

Scope Name:

  • Google Apps Provisioning API
  • Groups Rosters HTTPS R/O
  • Groups Provisioning
  • Provisioning API
  • User Provisioning
  • Provisioning API
  • Google Profiles Management
  • Google Profiles API
  • Google Analytics Management
  • Google Analytics Provision
  • Admin Audit API Read Only
  • Manage Cloud Identity Groups
  • Manage web content
  • New site verifications
  • Admin Settings API: Domain
  • Manage group provisioning
  • Manage group subscriptions
  • Manage organization units
  • Directory API: OrgUnits R/O
  • Manage provisioning
  • Directory API: Users R/O
  • Manage data access (admin)
  • Manage Analytics Users
  • Groups Settings API v1
  • Manage G Suite
  • Manage User Accounts
  • Manage Google Partners info

Scopes Recategorized as Access payment information

Google Access Scope:

Scope Name:

  • Chrome Web Store
  • Chrome Web Store Read Only
  • In-App Payments
  • Google Wallet Instant Buy API
  • Google Wallet Instant Buy API
  • Google Play payment info
  • Google Wallet Instant Buy API
  • Google Wallet API
  • Google Wallet API
  • View App Licensing
  • Manage Google Platform Billing
  • View account ZIP Code
  • Data transfer administration
  • Google Admin Directory API
  • Enterprise Apps Reseller API v1
  • Google Classroom API v1
  • Google Classroom API v1
  • Google Classroom API v1
  • Google Classroom API v1
  • Google Classroom API v1
  • Google Classroom API v1
  • Google Classroom API v1
  • Google Classroom API v1
  • Google Classroom API v1
  • View Cloud Identity Groups
  • Cloud Testing API v1
  • Compute Engine API v1
  • Drive API v3
  • G Suite Vault API v1
  • Fitness v1
  • Fitness v1
  • Fitness v1
  • Fitness v1
  • Fitness v1
  • Fitness v1
  • Fitness v1
  • Fitness v1
  • Fitness v1
  • Stackdriver Logging API v2
  • Stackdriver Monitoring API v3
  • Google Cloud DNS API v1
  • Google Cloud DNS API v1
  • Replica Pool API v1beta1
  • Google Slides API v1
  • Compute Engine Instance Group Update
  • Service Management API v1
  • Cloud Source Repositories
  • Cloud Source Repositories
  • Tag Manager API v2
  • People API v1
  • People API v1
  • People API v1
  • People API v1
  • Search Console API v3
  • YouTube Data API v3
  • View customer domains
  • Directory API: Groups Read Only
  • View Admin Roles
  • Admin Reports API reports_v1
  • View usage reports
  • Google Analytics Reporting
  • View Calendar Settings
  • View Teacher Instructions
  • View subscription data
  • View Cloud Platform Projects
  • View Survey Results
  • View Users on your Domain
  • View Google Docs
  • View Drive Records
  • View metadata for files
  • Google Sheets API v4
  • View files in Google Drive
  • View profiles
  • View Google Indexing
  • Web hosting
  • View Photos library
  • Google+ Domains API v1
  • View all
  • View Google+
  • View your Google+ dada
  • Google Apps Script deployments
  • Google Apps Script
  • Google Task Assist completions
  • View Teams profile
  • Read Trace data
  • View security groups
  • View Poly assets