noviembre 24, 2025
Granular OAuth consent in web apps and Google Workspace add-ons
What’s changing
Earlier this year, we launched an improved version of the OAuth consent screen to the Apps Script IDE and unpublished web apps and Google Workspace add-ons that allows users to specify which individual scopes they would like to authorize for that script. For example, if a script requests access to a user’s Google Sheets and Forms files, and the user only intends to use the script with Sheets files, they can decide to only allow access to their spreadsheets and not their forms.
 |
| This screenshot shows the new OAuth consent screen, which lets the user provide consent for a subset of the requested OAuth scopes. |
We’re excited to announce that this more granular OAuth consent screen will be expanding to an additional Apps Script execution type. Soon, published web apps and Google Workspace add-ons powered by Apps Script will also present users with this more granular consent screen when requesting an OAuth grant. This will allow users to provide partial OAuth consent when authorizing new applications built on these platforms. A reminder that this also includes reconsenting to applications when OAuth grants expire.
Additional details
To prepare for the release of this new consent flow, we suggest that web apps and Google Workspace add-ons developers refer to the ScriptApp and AuthorizationInfo classes. These allow Apps Script developers to programmatically interact with the scopes granted for a script. This allows developers to put in such safeguards as short-circuiting a script execution if not all scopes are granted. For more information, refer to the developer documentation. To test these changes, please see the documentation on testing web apps and Google Workspace add-ons.
Getting Started
- Admins: There is no admin control for this feature.
- Developers and end users:
- This new consent screen will only be used for new OAuth scope grants. Pre-existing scope grants will not be affected, so no action is required by users on scripts they’ve already authorized.
Rollout pace
- Rapid Release and Scheduled Release domains: Extended rollout (potentially longer than 15 days for feature visibility) starting on January 7, 2026
Availability
- Available to all Google Workspace customers and Workspace Individual subscribers