EmailShot OAuth Permissions Explained

Updated on

When installing EmailShot, Google's authorization dialog lists the permissions the add-on requests without much explanation — which understandably gives some users pause. Here's exactly what each permission is for.

OAuth permissions dialog

  1. User Email Access (https://www.googleapis.com/auth/userinfo.email)
    Lets the add-on read your email address. Used to associate EmailShots with your account and to send the welcome email. Your address is never stored outside of Google Cloud infrastructure.
  2. Read-Only Access to Current Email Message (https://www.googleapis.com/auth/gmail.addons.current.message.readonly)
    Lets the add-on read the email currently open in Gmail — but only when you explicitly create an EmailShot. We do not read or store emails you simply open.
  3. Execute Actions within Gmail (https://www.googleapis.com/auth/gmail.addons.execute)
    Required for the add-on to respond to user interactions and render its interface inside Gmail.
  4. Determine User Locale (https://www.googleapis.com/auth/script.locale)
    Lets the add-on read your locale setting so it can adapt to your language preferences.
  5. Generate Workspace Link Previews (https://www.googleapis.com/auth/workspace.linkpreview)
    Enables Smart Chips — when you paste an EmailShot link into Google Docs, Slides, or Sheets, this scope allows a rich preview to appear on hover.
  6. Create Links in Workspace Documents (https://www.googleapis.com/auth/workspace.linkcreate)
    Lets you insert one of your recent EmailShots from the @ menu in Google Docs, without copying the link from Gmail first.
  7. Run as a Calendar Add-on (https://www.googleapis.com/auth/calendar.addons.execute)
    Required for the add-on to show its interface inside Google Calendar, such as the list of recent EmailShots under Add attachment.
  8. Add Attachments to the Event You're Editing (https://www.googleapis.com/auth/calendar.addons.current.event.write)
    Lets EmailShot attach an email to a Calendar event. It only applies to the event you have open, and only when you pick an EmailShot to attach. EmailShot can't read or change your other events.

The two Calendar permissions are only needed to attach EmailShots in Google Calendar. If you don't grant them, EmailShot keeps working in Gmail, Docs, Sheets, and Slides, and asks for them again only when you use it in Calendar.

If you have questions about any of these permissions, contact us.

Other KB articles