This is brilliant, Cameron! Thank you so much for this—it really helped me understand what happens when adding or deleting scopes.
The only thing I’m still unsure about is what happens when our app is already listed and we add a new scope. Specifically:
- How will the new login process look for the admin?
- How will they grant access to the new scope?
- Will they see the OAuth consent screen again? If so, what will be displayed there?
- Or will they need to manually approve the new scope in the Admin Console to make the app fully granted?
Any insights into this process would be greatly appreciated. Thanks again for your help!