ToogleBox API Scope Usage

ToogleBox Recall API scope usage

The following API scopes are activated when installing ToogleBox Recall
https://www.googleapis.com/auth/userinfo.email
Used in add-on to get the email address of the user.
https://www.googleapis.com/auth/userinfo.profile
Used to get the name of the user.
https://www.googleapis.com/auth/gmail.addons.current.message.readonly
Used by the Add-on to get the sender and Gmail message_id of emails. The sender is needed to determine whether or not the email sender is the current user. The Recall button is displayed only if the sender is the current user. The Gmail message_id is passed to the ToogleBox backend service as a retrieve argument to find and delete the email chosen by the current user to be recalled.
https://www.googleapis.com/auth/script.locale
Used to get the user language. It is used to interact with the user in their language.
https://www.googleapis.com/auth/script.external_request
Allows Recall to connect with ToogleBox backend service to start a task that will search and delete emails chosen by the current user.
https://www.googleapis.com/auth/gmail.addons.execute
Used to execute the Recall Gmail add-on.

InfoBox API scope usage

The following API scopes are activated when installing InfoBox
https://www.googleapis.com/auth/userinfo.email
Used in add-on to get the email address of the user.
https://www.googleapis.com/auth/userinfo.profile
Used to get the name of the user.
https://www.googleapis.com/auth/script.locale
Used to get the user language. It is used to interact with the user in their language.
https://www.googleapis.com/auth/script.external_request
Allows InfoBox to connect with ToogleBox and storage.googleapis.com to retrieve the notes to be displayed.
https://www.googleapis.com/auth/gmail.addons.execute
Used to execute the InfoBox Gmail add-on.

ToogleBox API scope usage

The following API scopes are activated when installing ToogleBox
https://www.googleapis.com/auth/userinfo.email
Used in log in to get the email address of the connecting user. ToogleBox uses the email address to identify the user and to send results emails.
https://www.googleapis.com/auth/userinfo.profile
Used to get the name and profile photo of the connected user.The user profile photo appears in the upper right of the screen. It is also used when applying signatures whose design includes a profile pic.The user name appears in the upper right of the screen and is used to personalize emails sent to them.
https://mail.google.com
Used to find and delete unwanted emails within the user domains.This scope allows Superadmins and authorized users to find and delete unwanted or wrongful (phishing, hate mail, etc.) emails in all accounts within the domain in a matter of minutes.Also, end-users can recall emails they have sent within their domain (only if allowed by a Superadmin).
https://www.google.com/m8/feeds
Used to find and delete shared contacts in the Directory. It is used in two services:
1. External Contacts Auto Sync: synchronizing the shared contacts in the Directory with external Directories.
2. External Contacts Manual Update: Insert and delete the shared contacts in the Directory through CSV files upload/download.
https://www.googleapis.com/auth/admin.directory.orgunit.readonly
All our services can be targeted to specific OUs. We use this scope to validate the OUs chosen by the user.
https://www.googleapis.com/auth/admin.directory.user:
Used to retrieve and delete end-user info in the Directory.End-user info like first name, last name, and telephone can be updated through our services. There is a batch update through a CSV file upload and a one-by-one update dialog.We also use the scope to get a list of domain users for email deletion, contact deletion, signature enforcement, contact maintenance, etc.
https://www.googleapis.com/auth/admin.directory.group.readonly
Used to get email addresses within groups. Since the Recall service needs to know all recipients of the target email, we use this scope to know all recipients included in groups.
https://www.googleapis.com/auth/admin.directory.customer.readonly
Used to get the customer ID of a user. This info is used to understand to which customer a user belongs.
https://www.googleapis.com/auth/admin.directory.domain.readonly
Used to get the list of domains of a customer. This info is used to understand which domains belong to each customer. This info is used during the initial service activation to display a list of all candidate domains of the customer.
https://www.googleapis.com/auth/gmail.settings.basic
Used to get and update user signatures. We offer a Signature Management service.
https://www.googleapis.com/auth/admin.directory.group
Used to create and maintain groups under both Manual and Dynamic Group Management services.
https://www.googleapis.com/auth/apps.groups.settings
Used to create and maintain settings of groups under both Manual and Dynamic Group Management services.
https://www.googleapis.com/auth/admin.directory.userschema.readonly
Used to retrieve and update end-user info in Directory’s custom schemas.
https://www.googleapis.com/auth/admin.datatransfer
When an end-user account is deleted, this scope is used to transfer data to the inheritor account.
https://www.googleapis.com/auth/calendar
This scope allows sharing the primary calendar of end-users with external domains.
https://www.googleapis.com/auth/contacts
Used to find and delete user contacts. It is used in two services:
1. Unwanted Contacts Search and Deletion: removal of unwanted contacts from the end-user’s address books.
2. Internal Contacts Auto Sync: synchronizing the contacts in the end-user’s address books with the Directory.