Allow Otto in Google Workspace

Google Workspace admins control which third-party apps their people can connect to Google data. If Otto is blocked for your organization, an admin can mark it as Trusted, and the people in the organizational units you choose can then connect their Workspace account.

You need the Service Settings administrator privilege to make this change. Otto's OAuth client ID is 1016895932748-thc4dfuc58jtsakqbl1qvt4rcevqkh2l.apps.googleusercontent.com.

Mark Otto as trusted

1. Sign in to the Google Admin console as an admin.
2. Open Security, then Access and data control, then API controls.
3. Choose Manage third-party app access.
4. Under Configured apps, choose Configure new app.
5. Enter Otto's client ID from above and choose Search.
6. Choose who the setting covers. The top organizational unit is selected by default.
7. Set the access level to Trusted, then review the settings and choose Finish.

Google says changes can take up to 24 hours but typically apply more quickly.

What Trusted means

Google describes a Trusted app as one that can access all Google Workspace services, including restricted ones. Google also says that when someone tries to install or sign in to an app you have not trusted and it uses a restricted service, they are told the app is blocked. Marking Otto as Trusted removes that block for the organizational units you chose.

If you would rather list exactly what Otto may use, choose Specific Google data instead and enter these scopes. Google also asks you to include the sign-in scopes the app needs.

• openid
• email
• profile
• https://mail.google.com/
• https://www.googleapis.com/auth/gmail.settings.basic
• https://www.googleapis.com/auth/calendar.events
• https://www.googleapis.com/auth/calendar.calendarlist.readonly
• https://www.googleapis.com/auth/calendar.events.freebusy
• https://www.googleapis.com/auth/contacts.readonly
• https://www.googleapis.com/auth/tasks
• https://www.googleapis.com/auth/drive.file

What Otto uses these for

Otto reads and sends mail, manages your calendar and Google Tasks, reads contacts, and saves files you choose to Drive. Your people can review or revoke Otto's access from their Google Account at any time.

Microsoft 365

Running Microsoft 365 as well? The Outlook guide covers the one-time admin approval for work and school accounts.