Google Workspace
Identity & email security
1Permissions
2Service account
3Admin portal
4Connect
OAuth scopes InventoryOS needs
In step 3 you will grant these to a service account via domain-wide delegation in the Google Admin console. Copy the full list from there.
ScopePurpose
admin.directory.user.readonlyRead users
admin.directory.group.readonlyRead groups and membership
admin.reports.usage.readonlyMailbox usage and activity
apps.licensingLicense assignments
gmail.settings.basicGmail forwarding settings
gmail.settings.sharingGmail send-as and delegation