Glossary · Security and access
OAuth
A delegated authorization framework that lets a user grant limited application access without giving the application the user's password.
Definition
OAuth supports delegated access through scopes and tokens. A user or administrator approves defined permissions, and the application receives a token rather than the account password. Tokens may expire or be revoked, and the application must protect them like other secrets.
Why it matters
OAuth is often the appropriate model for accessing a client's Google or other vendor account while preserving client ownership and revocation control.
Common misunderstanding
OAuth approval is not unlimited permission. Scopes, account roles, provider policy, and the specific user action still constrain what the integration should do.
Related terms
Related system family: Secure Integrations & Custom Tools
Sources
- Google Analytics Data API overview (opens in a new tab) · Google for Developers
- Google Business Profile APIs (opens in a new tab) · Google for Developers
Last reviewed July 16, 2026