ChromeOS Device Access
OAuth Scope:
https://www.googleapis.com/auth/admin.directory.device.chromeos.readonly
This allows us to read information about ChromeOS devices managed in Google Workspace.
We use it to review enrolled Chromebooks and ChromeOS device inventory, including device status and management details.
This is important because unmanaged or outdated devices can create security risk. Device visibility helps confirm that endpoints are properly enrolled and governed.
Mobile Device Access
OAuth Scope:
https://www.googleapis.com/auth/admin.directory.device.mobile.readonly
This allows us to read information about mobile devices known to Google Workspace.
We use it to understand which mobile devices are connected to the environment and whether they are managed.
This is important because mobile devices often access email, files, and business applications. Visibility helps identify devices that may need stronger controls.
Cloud Identity Device Access
OAuth Scope:
https://www.googleapis.com/auth/cloud-identity.devices.readonly
This allows us to read device information from Google Cloud Identity.
We use it to get broader device visibility across Cloud Identity and Google Workspace, especially for devices associated with users and access decisions.
This is important because device posture is often part of modern access control. Knowing which devices are present, helps assess whether access policies are being applied to trusted devices.