Manage data access for admin-installed Marketplace apps

As an administrator, you can revoke an admin-installed Google Workspace Marketplace app’s access to make your users re-authorize an app. If an app has requested additional access since you installed it, you can also grant that access.

You can also use API controls to Manage third-party app access to Google services .

Note:When setting app access for Google Chat, app-centric scopes must be granted at the root OU level. For more information, see Set up app authorization for Chat .

If you revoke access to a Google Workspace add-on that works in Google Chat:

• Revoking access does not block Chat app access because invoking Chat apps don't require OAuth scopes. To block access, uninstall the app. You should also remove the app from the Apps allowlist to prevent users from installing it.
• When a user invokes the Chat app, their user identity and profile information is shared with the third-party app developer.

For more details on Chat app access, please read  App access to user data .

Review, grant, or revoke data access for a Marketplace app

1. Sign in with an administrator account to the Google Admin console.

   If you aren’t using an administrator account, you can’t access the Admin console.

2. Go to Menu  Apps > Google Workspace Marketplace apps > Apps list .

   Requires having the Service Settings administrator privilege .

3. Find the app that you want to change data access for in the Domain Installed Appsor Allowlisted Appslists and click the app name.
4. In the Data Accesssection, review the status and the lists of OAuth scopes and clients that the app requests. To get more information about a scope, click the down arrow.
5. If the status is Partially granted, that means the app requested additional scopes since you first installed it. To grant all access for the app, at the top of the Data Accesssection click Grant access.
6. To revoke all access, at the top of the Data Accesssection click Revoke access. You can’t revoke access for specific scopes. When users try to use the app, they’re prompted to reauthorize permissions for the app.