Google Workspace · OAuth
Gmail, Calendar, and Drive permissions
OAuth scopes define what an app can read or change in a Google account. This reference lists every scope currently documented for Gmail, Google Calendar, and Google Drive.
Request the narrowest scopes your app needs. Public apps using sensitive or restricted scopes may need Google verification; restricted data stored or transmitted by a server can also require a security assessment.
14 scopes
| Scope | What it allows |
|---|---|
https://www.googleapis.com/auth/gmail.addons.current.action.compose | Manage drafts and send email while the user interacts with a Gmail add-on. |
https://www.googleapis.com/auth/gmail.addons.current.message.action | View messages while the user interacts with a Gmail add-on. |
https://www.googleapis.com/auth/gmail.labels | View and edit Gmail labels. |
https://www.googleapis.com/auth/gmail.addons.current.message.metadata | View message metadata while a Gmail add-on is running. |
https://www.googleapis.com/auth/gmail.addons.current.message.readonly | View messages while a Gmail add-on is running. |
https://www.googleapis.com/auth/gmail.send | Send email on the user's behalf. |
https://mail.google.com/ | Read, compose, send, and permanently delete all Gmail data. |
https://www.googleapis.com/auth/gmail.readonly | View email messages and Gmail settings. |
https://www.googleapis.com/auth/gmail.compose | Create and manage drafts, and send email. |
https://www.googleapis.com/auth/gmail.insert | Insert email directly into the mailbox. |
https://www.googleapis.com/auth/gmail.modify | Read, compose, send, and modify email without bypassing Trash for permanent deletion. |
https://www.googleapis.com/auth/gmail.metadata | View message metadata such as labels and headers, but not message bodies. |
https://www.googleapis.com/auth/gmail.settings.basic | View and change basic Gmail settings and filters. |
https://www.googleapis.com/auth/gmail.settings.sharing | Manage sensitive sharing settings. Available only to Workspace administrators using domain-wide delegation. |
Google Calendar
Official Calendar scope reference| Scope | What it allows |
|---|---|
https://www.googleapis.com/auth/calendar | See, edit, share, and permanently delete every accessible calendar. |
https://www.googleapis.com/auth/calendar.readonly | View and download accessible calendars. |
https://www.googleapis.com/auth/calendar.freebusy | View the user's availability. |
https://www.googleapis.com/auth/calendar.events | View and edit events on all accessible calendars. |
https://www.googleapis.com/auth/calendar.events.readonly | View events on all accessible calendars. |
https://www.googleapis.com/auth/calendar.settings.readonly | View Calendar settings. |
https://www.googleapis.com/auth/calendar.addons.execute | Run as a Calendar add-on. |
https://www.googleapis.com/auth/calendar.addons.current.event.read | View the event currently open in a Calendar add-on. |
https://www.googleapis.com/auth/calendar.addons.current.event.write | Edit the event currently open in a Calendar add-on. |
https://www.googleapis.com/auth/calendar.events.owned | View, create, change, and delete events on calendars the user owns. |
https://www.googleapis.com/auth/calendar.events.owned.readonly | View events on calendars the user owns. |
https://www.googleapis.com/auth/calendar.events.freebusy | View availability on accessible calendars. |
https://www.googleapis.com/auth/calendar.app.created | Create secondary calendars and manage events on calendars created by the app. |
https://www.googleapis.com/auth/calendar.calendarlist | View, add, and remove calendars in the user's calendar list. |
https://www.googleapis.com/auth/calendar.calendarlist.readonly | View the user's calendar list. |
https://www.googleapis.com/auth/calendar.calendars | View and change calendar properties, and create secondary calendars. |
https://www.googleapis.com/auth/calendar.calendars.readonly | View properties of accessible calendars. |
https://www.googleapis.com/auth/calendar.acls | View and change sharing permissions for calendars the user owns. |
https://www.googleapis.com/auth/calendar.acls.readonly | View sharing permissions for calendars the user owns. |
https://www.googleapis.com/auth/calendar.events.public.readonly | View events on public calendars. |
Google Drive
Official Drive scope reference| Scope | What it allows |
|---|---|
https://www.googleapis.com/auth/drive.appdata | View and manage the app's own configuration data in Drive. |
https://www.googleapis.com/auth/drive.appfolder | Alias of drive.appdata; view and manage the app's configuration data. |
https://www.googleapis.com/auth/drive.install | Allow the app to appear in Drive's Open with and New menus. |
https://www.googleapis.com/auth/drive.file | Create files and access only files the user opens with or shares with the app. |
https://www.googleapis.com/auth/drive.apps.readonly | View apps authorized to access the user's Drive. |
https://www.googleapis.com/auth/drive | View and manage all the user's Drive files. |
https://www.googleapis.com/auth/drive.readonly | View and download all the user's Drive files. |
https://www.googleapis.com/auth/drive.activity | View and add to the activity record of Drive files. |
https://www.googleapis.com/auth/drive.activity.readonly | View the activity record of Drive files. |
https://www.googleapis.com/auth/drive.meet.readonly | View Drive files created or edited by Google Meet. |
https://www.googleapis.com/auth/drive.metadata | View and manage metadata for Drive files. |
https://www.googleapis.com/auth/drive.metadata.readonly | View metadata for Drive files. |
https://www.googleapis.com/auth/drive.scripts | Modify how Google Apps Script projects behave. |