Continuous Compliance Documentation

OAuth Drive and Label Permissions

Drive Metadata Access

OAuth Scope:

https://www.googleapis.com/auth/drive.metadata.readonly

This allows us to read Google Drive file metadata.

Metadata includes information such as:

  • File names

  • Owners

  • File types

  • Timestamps

  • Sharing-related details

NOTE: It does not allow us to read or change the file content.

We use it to understand file ownership, sharing patterns, and the structure of Drive content. This is important because file metadata helps identify risky sharing behavior, orphaned files, externally shared content, and ownership issues without needing to inspect the contents of documents.

Drive Label Access

OAuth Scope:

https://www.googleapis.com/auth/drive.admin.labels.readonly

This allows us to read Drive labels and label-related admin policies.

We use it to understand:

  • How the organization classifies files

  • How labels are applied

  • How information governance is managed across Drive

This is important because labels are often used for data classification, retention, compliance, and information protection. Reviewing label configuration helps confirm that classification rules are in place and aligned with policy.