如要定義授予應用程式的存取權層級，您必須識別並宣告授權範圍。授權範圍是 OAuth 2.0 URI 字串，其中包含 Google Workspace 應用程式名稱、應用程式存取的資料類型，以及存取層級。「範圍」是指應用程式要求處理 Google Workspace 資料的權限，包括使用者的 Google 帳戶資料。
[null,null,["上次更新時間：2024-12-21 (世界標準時間)。"],[[["This document provides Google Vault API-specific authorization and authentication details, requiring prior understanding of Google Workspace's general authentication and authorization."],["You need to configure the OAuth consent screen, choose scopes, and register your app for authorization using OAuth 2.0."],["Vault API uses specific scopes defining the level of access granted to your application to Google Workspace data, requiring careful selection to ensure user privacy."],["The two key scopes for Vault API are `https://www.googleapis.com/auth/ediscovery` for managing eDiscovery data and `https://www.googleapis.com/auth/ediscovery.readonly` for viewing it."]]],["The Google Vault API utilizes OAuth 2.0 for authorization, requiring the configuration of an OAuth consent screen and scope selection. Scopes define the app's access level to Google Workspace data, and users must validate these scopes during app installation. Applications should request the most narrowly focused scopes possible. Public applications using specific scopes must undergo a verification process to avoid being flagged as \"unverified.\" The Vault API offers two scopes: `ediscovery` (manage eDiscovery data) and `ediscovery.readonly` (view eDiscovery data).\n"]]
