The Application scope must be defined in the Google Directory OAuth2 Account to allow access to the correct Google APIs. By default, this is set to: 

• https://www.googleapis.com/auth/admin.directory.user

• https://www.googleapis.com/auth/admin.directory.orgunit

• https://www.googleapis.com/auth/admin.directory.group

• https://www.googleapis.com/auth/admin.directory.user.alias

To allow one account to handle all API calls for the user, orgunit, and group APIs. If you wish to restrict access to certain APIs you may do so by modifying this property. The following tables lists which scope is required for the supported API calls. To supply more than one scope at a time in the Application scope field, separate them with a space.

See Also

• https://developers.google.com/admin-sdk/directory/v1/guides/authorizing