Security Review

The security review team checks that your add-on requests the correct OAuth scopes. Ensure that the following scopes have been configured on the Google Workspace Marketplace SDK configuration screen:

• auth/userinfo.email (added by default)
• auth/userinfo.profile (added by default)
• classroom.addons.teacher
• classroom.addons.student

Ensure also that the following scopes are requested by your add-on:

• classroom.addons.teacher
• classroom.addons.student

Note: The scope configurations for both Marketplace SDK and your add-on must match. This requirement ensures that the information in the Marketplace is consistent with what users see when they install your add-on and view the OAuth consent screen.

Google creates a video demonstrating the add-on's consent screen with the scopes presented to users and the basic functions of the add-on. You then upload it as an unlisted video to YouTube; an unlisted video can only be reached using its link. You're prompted for the video link when starting the OAuth verification process. The security team then views the video when reviewing your add-on.

For more details on Google's security review, visit OAuth API verification FAQs.