Set up app authorization for Chat

Note: Currently, apps can receive and write messages. In the future, there will be privileges that grant Chat apps access to create and manage spaces. This feature is currently in developer preview.

Chat apps can be given permission to create and manage spaces automatically. To do this, you must grant authorization access for apps in Chat. To learn more about permission privileges, read Administrator privilege definitions.

What are app permissions

App permissions are privileges that allow apps to use Chat like a user might. They differ from user permissions in a few ways:

• They include instructions on what the app can and can’t do
• App permissions can’t be granted by organizational unit

Apps request permission to do specific things with OAuth 2.0 authorization scopes. App authorization scopes follow a common nomenclature, https://www.googleapis.com/auth/chat.app.*, where * indicates the action. For example, the https://www.googleapis.com/auth/chat.app.spaces.create authorization scope lets apps create spaces, but not update or delete spaces. Before apps can perform the actions their authorization scopes request, a Workspace administrator must grant one-time app-specific approval. To learn more about authorization scopes and Chat apps, see Authenticate and authorize Chat apps and Google Chat API requests.

Grant apps Chat authorization

If an app requires app permissions, they’ll be included in the authorization screen during the installation process under data access requirements. App permissions can be identified from the description; they will request authorization to perform tasks on their own..

Remember to only grant data access to trusted apps and developers. Providing access to a malicious app can compromise your organization’s data. For more information, go to Evaluate a Google Workspace Marketplace app.

1. Sign in to your Google Admin console.

   Sign in using an account with super administrator privileges (does not end in @gmail.com).

2. In the Admin console, go to Menu  AppsGoogle Workspace Marketplace appsApps list.
3. Click Install app.
4. Browse Google Workspace Marketplace and click the app you want to install. For more information about app categories and filters, go to Find and install an app in the marketplace.
5. Click Admin installContinue.
   Note: Individual install is for when you want to install an app for your administrator account only.
6. Review the data access requirements, developer terms, and developer policies.
7. Select Everyone at your organizationFinish.

If you change your mind about an app, you can change who the app is installed for or uninstall the app. The scope for installed apps with Chat authorization can be reviewed from the Admin Console in the Google Workspace Marketplace apps menu.

Changes can take up to 24 hours but typically happen more quickly. Learn more