> ## Documentation Index
> Fetch the complete documentation index at: https://docs.getintrod.ai/llms.txt
> Use this file to discover all available pages before exploring further.

# OAuth Permissions

> Review the exact identity, Gmail, Calendar, Contacts, and Outlook scopes used by current Introd connection flows.

OAuth lets you grant provider access without giving Introd your provider password. Review the provider consent screen before approving it.

> Last verified against current dashboard and API source on August 11, 2026.

## LinkedIn account connection

| Scope                | Current use                                                        |
| -------------------- | ------------------------------------------------------------------ |
| <code>openid</code>  | Complete OpenID Connect authentication                             |
| <code>profile</code> | Read the signed-in LinkedIn profile identity                       |
| <code>email</code>   | Associate the returned email identity with the Introd account flow |

This OAuth flow is distinct from the Chrome extension's LinkedIn host access. See [Extension Permissions](/chrome-extension/permissions) for the browser permissions.

## Google Workspace

| Scope                                                                                                                             | Current use                                                    |
| --------------------------------------------------------------------------------------------------------------------------------- | -------------------------------------------------------------- |
| <code>openid</code>                                                                                                               | Complete OpenID Connect authentication                         |
| <code>profile</code>                                                                                                              | Read basic Google account identity                             |
| <code>email</code>                                                                                                                | Identify the connected Google account                          |
| <code>[https://www.googleapis.com/auth/gmail.metadata](https://www.googleapis.com/auth/gmail.metadata)</code>                     | Read Gmail message metadata and headers without message bodies |
| <code>[https://www.googleapis.com/auth/calendar.events.readonly](https://www.googleapis.com/auth/calendar.events.readonly)</code> | Read Calendar event metadata                                   |
| <code>[https://www.googleapis.com/auth/contacts.readonly](https://www.googleapis.com/auth/contacts.readonly)</code>               | Read Contacts data                                             |

## Microsoft 365

| Scope                        | Current use                                                                     |
| ---------------------------- | ------------------------------------------------------------------------------- |
| <code>openid</code>          | Complete OpenID Connect authentication                                          |
| <code>profile</code>         | Read basic Microsoft account identity                                           |
| <code>email</code>           | Identify the connected Microsoft account                                        |
| <code>User.Read</code>       | Read the signed-in user's basic profile                                         |
| <code>Mail.ReadBasic</code>  | Read basic Outlook message metadata without message content                     |
| <code>Calendars.Read</code>  | Read Outlook Calendar metadata                                                  |
| <code>offline\_access</code> | Allow the authorized connection to refresh without a new sign-in for every sync |

## Grant access

1. Start from [Introd Integrations](https://app.getintrod.ai/settings/integrations).
2. Choose **Connect** for Google Workspace or Microsoft 365.
3. Confirm that the provider account and requested permissions match this page.
4. Approve the provider consent screen only if you accept that access.
5. Return to Introd and verify the provider card.

**Expected result:** the card reports Connected, Partial, Syncing, or another explicit status. A provider callback error means the connection was not completed.

## Change or remove access

* Use **Disconnect** in Introd to clear Introd's stored Google or Microsoft connection tokens and stop future sync.
* Use the provider's account controls to review or revoke provider-side consent.
* Request deletion of imported Introd data separately.

Disconnecting does not erase previously imported Introd records. See [Deletion and Privacy Requests](/privacy-security/gdpr-and-deletion).

## Consent failures

| What you see            | Recovery                                                                                                                                    |
| ----------------------- | ------------------------------------------------------------------------------------------------------------------------------------------- |
| Provider denies consent | Return to Integrations; no completed connection is expected                                                                                 |
| Callback error          | Retry from the provider card and allow the provider redirect                                                                                |
| Reauthorization needed  | Reconnect and review the current consent screen                                                                                             |
| Unexpected permission   | Stop the flow and email [help@getintrod.ai](mailto:help@getintrod.ai) with the provider name and screenshot; do not include codes or tokens |