67 Apps Script / add-on / AI-agent governance

Caveats

• Apps Script on/off and per-app blocking work on all editions; the Apps Script URL-fetch allowlist needs Business Plus+, and OAuth-scope monitoring / high-risk-scope restriction needs Enterprise or Education Standard/Plus.
• The API-controls half is the same screen as №8 and №9 — set it once, and make sure the three controls’ verdicts agree instead of overwriting each other.

Setup steps

1. 1. Set Apps Script service status per OU (organizational unit) — off by default, on only for the OU that actually builds automation.
   open ↗

   

   https://admin.google.com/ac/appslist/additional · captured 2026-07-15

   Apps › Additional Google services › Google Apps Script

   Service status = Off for everyone; On for the automation OU

2. 2. Restrict Apps Script to organisation-owned projects via App access control: with unconfigured third-party apps blocked (next step), enable Trust internal apps so only organisation-owned script projects keep working.
   open ↗

   

   https://admin.google.com/ac/owl/settings · captured 2026-07-15

   Security › Access and data control › API controls › App access control

   Trust internal, domain-owned apps = On (organisation-owned scripts allowed; external/unknown scripts fall under the unconfigured-apps block)

3. 3. Set unconfigured third-party apps (which includes new add-ons and agent integrations) to "Don't allow users to access any third-party apps" on the Settings tab, then allowlist by client id in the configured-apps list (№8).

   Security › Access and data control › API controls › App access control

   Settings: Unconfigured third-party apps = Don't allow users to access any third-party apps; Manage third-party app access: trusted apps added explicitly (№8)

4. 4. Review the domain-wide delegation (DWD) client list (№8 audits the same register) — a delegated service account bypasses per-user consent entirely and is the most dangerous 'add-on' of all.
   open ↗

   

   https://admin.google.com/ac/owl/domainwidedelegation · captured 2026-07-15

   Security › Access and data control › API controls › Domain-wide delegation

   Remove any client id without a named owner and a justified scope list

Ongoing maintenance

• automatable: AI agent Monthly: review newly created Apps Script projects and add-on grants against the register.

How to verify

1. From a test account, run a script that calls a restricted API/scope — the consent or execution must be refused per the policy.