Granular OAuth consent in web apps and Google Workspace add-ons

What’s changing

Earlier this year,  we launched an improved version of the OAuth consent screen to the Apps Script IDE and unpublished web apps and Google Workspace add-ons that allows users to specify which individual scopes they would like to authorize for that script. For example, if a script requests access to a user’s Google Sheets and Forms files, and the user only intends to use the script with Sheets files, they can decide to only allow access to their spreadsheets and not their forms.

This screenshot shows the new OAuth consent screen, which lets the user provide consent for a subset of the requested OAuth scopes.
This screenshot shows the new OAuth consent screen, which lets the user provide consent for a subset of the requested OAuth scopes.

We’re excited to announce that this more granular OAuth consent screen will be expanding to an additional Apps Script execution type. Soon, published web apps and Google Workspace add-ons powered by Apps Script will also present users with this more granular consent screen when requesting an OAuth grant. This will allow users to provide partial OAuth consent when authorizing new applications built on these platforms. A reminder that this also includes reconsenting to applications when OAuth grants expire.

Additional details

To prepare for the release of this new consent flow, we suggest that web apps and Google Workspace add-ons developers refer to the ScriptApp and AuthorizationInfo classes. These allow Apps Script developers to programmatically interact with the scopes granted for a script. This allows developers to put in such safeguards as short-circuiting a script execution if not all scopes are granted. For more information, refer to the developer documentation. To test these changes, please see the documentation on testing web apps and Google Workspace add-ons.

Getting Started

  • Admins: There is no admin control for this feature.
  • Developers and end users: 
    • This new consent screen will only be used for new OAuth scope grants. Pre-existing scope grants will not be affected, so no action is required by users on scripts they’ve already authorized. 

Rollout pace

Availability

  • Available to all Google Workspace customers and Workspace Individual Subscribers

Google Workspace Updates Weekly Recap – November 21, 2025

A summary of announcements from the last week:

The announcements below were published on the Workspace Updates blog over the last week. Please refer to the original blog posts for complete details.

Block off time to work on a task in Calendar

Users can now easily block off time on their calendar to work on a specific task. On your calendar, select an empty slot > click task. From here, you can add the relevant task and description, and customize details like visibility and do not disturb settings. | Learn more about blocking off time to work on a task in Calendar.

Use Veo 3.1 ingredients-to-video to create clips from images in Google Vids

Create eight-second video clips in Google Vids using the new ingredients-to-video capability powered by Veo 3.1. Simply upload up to three images and write a prompt to generate content that maintains consistent subjects and characters. This feature allows you to tell a cohesive story for projects like brand promotions or training videos using your specific imagery as the foundation. | Learn more about Learn more about using Veo 3.1 ingredients-to-video to create clips from images in Google Vids.

Introducing Gemini 3 Pro for Gemini app

We’re bringing our most intelligent model, Gemini 3, to the Gemini app for Google Workspace customers. This update brings state-of-the-art reasoning to your most complex problems, setting a new bar for AI model performance and delivering a more powerful and helpful experience. | Learn more about Gemini 3 Pro for Gemini app.

Single-sign on with custom OpenID Connect profiles now generally available

Single-sign on with custom OpenID Connect profiles is now generally available. With this capability, admins have the option to set up a custom OpenID Connect (OIDC) profile for single sign-on (SSO) with Google as their service provider. | Learn more about Single Sign-On with custom OpenID Connect profiles.

Gemini in Google Classroom is expanding to students in higher education

Earlier this year, we launched Gemini in Google Classroom to help educators save time on planning and create more engaging lessons. In the coming weeks, we’re expanding Gemini in Classroom to students in higher education who are 18 years of age and older to help them study and learn. | Learn more about Gemini in Google Classroom expanding to students in higher education.

New Google Meet links when changing recurrence or start time of recurring Calendar events

To create a more consistent and secure meeting experience, we're changing what happens when you edit recurring Google Calendar events. Previously, when users modified the start time or recurrence of recurring events and applied the change to "This and following events," the remaining events used the original Google Meet link. | Learn more about Google Meet link updates when changing recurring Calendar events.

Introducing Nano Banana Pro in Slides, Vids, Gemini app, and NotebookLM

We’re excited to introduce Nano Banana Pro (Gemini 3 Pro Image), our new state-of-the-art image generation and editing model. Starting today, Nano Banana Pro is rolling out to Google Workspace customers in Google Slides, Vids, the Gemini app, and NotebookLM. | Learn more about Nano Banana Pro in Slides, Vids, Gemini app, and NotebookLM.

Collaborate seamlessly across Google Workspace and Egnyte

Egnyte’s enhanced Google Workspace integration is now generally available to all customers.  With this update, users can now securely locate, open, edit, and manage their Google Workspace files in Egnyte’s web UI, mobile app, and desktop client. | Learn more about seamless collaboration across Google Workspace and Egnyte.

Preview unread Google Chat messages from the left-hand menu

We’re excited to introduce a new way to triage your messages. Now, you can preview the last unread message in conversations directly from the left-hand menu, without marking it as read. Simply hover over a bolded conversation to peek at the message. When you are ready to engage, click to jump straight into the conversation or thread and take action. | Learn more about previewing unread Google Chat messages.

Long Term Support Channel Update for ChromeOS

A new LTS  version 138.0.7204.298 (Platform Version: 16295.83.0), is being rolled out for most ChromeOS devices. 

This version includes selected security fixes including:


450328966  High CVE-2025-13224 Type Confusion in V8.


And also

CVE-2025-21700, CVE-2025-21703, CVE-2025-21702, CVE-2025-21756, CVE-2025-21971, CVE-2025-21700, CVE-2025-21703, CVE-2025-21971, CVE-2025-37798, CVE-2025-37756, CVE-2025-37752, CVE-2025-21836, CVE-2024-27397

Release notes for LTS-138 can be found here

Want to know more about Long-term Support? Click here

Andy Wu
Google Chrome OS