What is the application?

The application was created with the objective of being used by IPNET's customers, so it would make it easy for them to do an upsell of their Workspace's licenses through the panel.

How are the scopes used?

The scope "external request" is used by our application to run the backend, that its another appscript, this application is the one that executes the impersonation.

The "cloud platform readonly" is used to get the user's organization, email and information, so that we can identify if his organization is one of our customers and if his e-mail is added to our "control" google group.