We have a plan to build a gmail addon (google app script) for our customers who are using Google Workspace for their companies. This addon will be installed by admins of their workspaces and let all users of them use it. As I know, I just have a solution that I need to publish this addon publicly and it needs to be reviewed by Google. This action can take a few weeks because this is a gmail addon and it can access sensitive data. It can be a big issue for us if we need to update our addon to support customer’s demands immediately. I found this information from Google: https://support.google.com/cloud/answer/9110914?hl=en#sensitive-scopes&zippy=%2Cgmail-apis%2Cexceptions-to-verification-requirements
If your app is going to be used in any of the following scenarios, you do not need to submit it for review:
- Domain-wide Installation: The app is used only by Google Workspace enterprise users. Access will depend on permission being granted by the domain administrator. Google Workspace domain administrators are the only ones that can add the app to an allowlist for use within their domains.
It means our addon don’t need to be review by google because:
- Domain-wide Installation: Google Workspace domain administrators are the only ones that can add the app to an allowlist for use within their domains.
- We don't need to publish this addon for everyone, we just publish with unlisted mode and let our customers install with URL.
Can anyone help to confirm it? Or do we have any way to work around this issue?
Thanks