Cloud Identity Group Access
OAuth Scope:
https://www.googleapis.com/auth/cloud-identity.groups.readonly
This allows us to read groups from Google Cloud Identity.
We use it to understand:
-
Cloud Identity groups
-
How groups are used for access control
-
Policy targeting
-
Application access management
This is important because groups can grant access across Google Cloud, Google Workspace, and connected applications. Reviewing them helps identify overbroad access or stale membership.