Finding / paperclip

2026-10-24-paperclip-beta-google-workspace-setup-initially-requests-read-and-write-across-three-services

Beta Google Workspace setup initially requests read and write across three services. New-account setup combines Gmail, Drive including Docs/Sheets/Slides, and Calendar under one google-workspace connection and grant. All three start enabled with read/write authority; users can disable or narrow groups before consent. The default request has nine scopes, and actual provider-granted scopes are rechecked per call. Existing individual connections stay supported without automatic merger. Managed OAuth remains limited to registered internal testers during preview; other companies need their own eligible OAuth app and enrollment. The implementation merged on 2026-10-19.

Channel: preview-or-beta. Half: both. Date: 2026-10-23.

Operator consequence: On 2026.1023.0-beta.0, review the combined scope request rather than assuming earlier individual-app choices constrain a new account. Deploy matching instance/broker registries and qualify the provider-granted subset. One setup flow can eliminate repeated consent plumbing, while increasing the consequence of accepting broad defaults.

Receipt

Finding metadata

Run: 2026-10-24-weekly-digest-2026-10-13_2026-10-24-frontier-v0

Finding ID: 2026-10-24-paperclip-beta-google-workspace-setup-initially-requests-read-and-write-across-three-services

Source links

Primary links, including exact changelog lines when available.