This feature is not available for Google Workspace for Education. If you have a Google Workspace for Education edition, go to Manage access to unconfigured third-party apps for users designated as under 18.
When a user attempts to access an unconfigured third-party app, access is blocked by default. If a user requests access to a blocked app, it is added to a list of apps in the Google Admin console for your review. From this list, you can choose to allow the request, dismiss it, or explicitly block the app.
Review app access requests
-
Sign in with an administrator account to the Google Admin console.
If you aren’t using an administrator account, you can’t access the Admin console.
-
Go to Menu
Security > Access and data control > API controls.
Requires having the Security settings administrator privilege.
- For App access control, click Apps pending review.
This shows the number of apps that users have requested access to. - In Apps pending review, the requested apps are sorted by the number of user requests.
Tip: Before deciding which apps to configure access for, review the information for each app:- User requests—The number of users who requested access to the app. Click the number to see which users requested access to the app.
- Org units with requests—The number and name of organizational units in which users requested access.
- Requestable services—Google data the app previously requested to access from Google users.
- (Optional) To see more details for an app, click the app name.
Allow access to third-party apps
To allow access to a third-party app, configure the app's access settings by completing the following steps:
-
Sign in with an administrator account to the Google Admin console.
If you aren’t using an administrator account, you can’t access the Admin console.
-
Go to Menu
Requires having the Security settings administrator privilege.
-
For App access control, click Apps pending review.
This shows the number of apps that users have requested access to. - In the Apps pending review list, point to the app you want to allow access to and click Configure access.
- In the panel that opens, select the organizational units that you want to allow access to the app.
Note: You can select up to 10 organizational units. If you’re configuring more than 10 units, use bulk updates. For details, go to Add & configure third-party apps in bulk. - Click Configure access.
- (Optional) To change the organizational units you want to configure access for, select them in the Scope section.
- Click Next.
- For Access to Google data, select one of the following access settings.
Note: The setting you select is applied to all organizational units that you previously selected.- Trusted—Users can sign in with Google to the third-party app, and the app can request access to all Google data.
- Limited—Users can sign in with Google to the third-party app, and the app can request access only to unrestricted Google data.
- Specific Google data—Users can sign in with Google to the third-party app, and the app can request access only to user data from the OAuth scopes that you specify.
Note: You must include the Google sign-in scope to allow users to sign in with their managed Google Account.
- Click Next.
- (Optional) To let users know the outcome of their request, for Notifications, check the Notify users who requested access to this app box.
Users get an email letting them know if their request was approved or denied. - Review your selection and click Configure access.
Changes can take up to 24 hours but typically happen more quickly. Learn more
Note: You can always change an app's access setting to unconfigured at any time using a CSV bulk upload. Learn more
Dismiss an app access request
-
Sign in with an administrator account to the Google Admin console.
If you aren’t using an administrator account, you can’t access the Admin console.
-
Go to Menu
Requires having the Security settings administrator privilege.
- For App access control, click Apps pending review.
- Point at the app and click Dismiss to remove it from the list.
Note: If you don’t configure access to an app within 6 months, the app is automatically removed from the pending review list.
Changes can take up to 24 hours but typically happen more quickly. Learn more
Block access to a third-party app
If you block access to a third-party app, users can’t sign in to the app using their managed Google account, and the app can’t request access to any Google data.
-
Sign in with an administrator account to the Google Admin console.
If you aren’t using an administrator account, you can’t access the Admin console.
-
Go to Menu
Requires having the Security settings administrator privilege.
- In the Apps pending review list, point to the app you want to block and click Configure access.
- In the panel that opens, select the organizational units that you want to block access to the app for.
Note: You can select up to 10 organizational units. If you’re configuring more than 10 units, use bulk updates. For details, go to Add & configure third-party apps in bulk. - Click Configure access.
- (Optional) To change the organizational units you want to block access for, select them in the Scope section.
- Click Next.
- For Access to Google data, select Block.
- Click Next.
- (Optional) To let users know the outcome of their request, for Notifications, check the Notify users who requested access to this app box.
Users get an email notifying them if their request was approved or denied. - Click Configure access.
Changes can take up to 24 hours but typically happen more quickly. Learn more
