Microsoft 365 and Google Workspace Cards - API permissions and scopes

Overview

This page presents the permissions and/or scopes required by each Microsoft 365 and Google Workspace Use... card activities to provide input for Connections Services for defining the connectors.

Microsoft 365

Card activity	Required Graph API delegated permissions	Details
Microsoft Office 365 Scope	Files: files.readwrite, files.read, files.read.all, files.readWrite.all, sites.read.all, sites.readwrite.all Mail: mail.read, mail.readwrite, mail.send, Mail and Shared: mail.read.shared, mail.readwrite.shared, mail.send.shared Calendar: calendars.read, calendars.readwrite Calendar and Shared: calendars.read.shared, calendars.readwrite.shared Groups: group.read.all, group.readwrite.all	This scope activity is intended only for Studio users. The activity features a multiple selection combo-box with the following options: Unselected, Files, Mail, Calendar, Groups, Shared Each option corresponds to a specific set of scopes, described in the previous column.
Use OneDrive & SharePoint	Files.Read Files.Read.All Files.ReadWrite Files.ReadWrite.All Sites.Read.All Sites.ReadWrite.All Group.Read.All, Group.ReadWrite.All User.Read.All profile openid email	This is available starting with StudioX 21.8 release.

Google Workspace

Card activity	Required API permissions	Details
GSuite Application Scope	Scopes are determined through a discovery mechanism, where the 'GSuite Application Scope' activity scans it's child activities and determines the minimum scopes needed to operate all of them, and as such, the list is not constant but changes according to the activities dropped in.	This scope activity is intended for Studio users.
Use Google Document	openid, https://www.googleapis.com/auth/userinfo.email", https://www.googleapis.com/auth/userinfo.profile" https://www.googleapis.com/auth/drive	Required by JWT validation for downloading Google Certs, openid. Narrow scope needed to see user's email address, openid and people API. Narrow scope needed to see user's profile, openid and people API.
Use Google Drive	openid, https://www.googleapis.com/auth/userinfo.email", https://www.googleapis.com/auth/userinfo.profile" https://www.googleapis.com/auth/drive	Required by JWT validation for downloading Google Certs, openid. Narrow scope needed to see user's email address, openid and people API. Narrow scope needed to see user's profile, openid and people API.
Use Google Spreadsheet	openid, https://www.googleapis.com/auth/userinfo.email", https://www.googleapis.com/auth/userinfo.profile" https://www.googleapis.com/auth/drive	Required by JWT validation for downloading Google Certs, openid. Narrow scope needed to see user's email address, openid and people API. Narrow scope needed to see user's profile, openid and people API.

MailX (Outlook 365 and Gmail)

Card activity	Required API permissions	Details
Use Outlook 365 (.NET 4.6.1 - uses EWS behind the scenes)	https://outlook.office.com/EWS.AccessAsUser.All
Use Outlook 365 (.NET 5.0 - uses Graph API behind the scenes)	Mail.Read Mail.Read.Shared Mail.ReadWrite Mail.ReadWrite.Shared Mail.Send Mail.Send.Shared Calendars.Read Calendars.Read.Shared Calendars.ReadWrite Calendars.ReadWrite.Shared profile openid email MailboxSettings.Read User.Read
Use Gmail	openid, https://www.googleapis.com/auth/userinfo.email", https://www.googleapis.com/auth/userinfo.profile", [https://mail.google.com/", https://www.googleapis.com/auth/calendar"](https://mail.google.com/", https://www.googleapis.com/auth/calendar")	Required by JWT validation for downloading Google Certs, openid. Narrow scope needed to see user's email address, openid and people API. Narrow scope needed to see user's profile, openid and people API. Wide scope allowing access to all emails, read write send, gmail API. Wide scope allowing access to all calendars, read create modify, calendar API.