Prefer the read-only scope.

Eric Koleda · Eric Koleda · commit 02f828c6f9a1 · 2018-05-18T15:07:40.000-04:00
diff --git a/admin_sdk/groups_settings/detect_external_access.py b/admin_sdk/groups_settings/detect_external_access.py
@@ -25,7 +25,7 @@
 
 # If modifying these scopes, delete your previously saved credentials
 # at credentials.json
-SCOPES = ['https://www.googleapis.com/auth/admin.directory.group',
+SCOPES = ['https://www.googleapis.com/auth/admin.directory.group.readonly',
           'https://www.googleapis.com/auth/apps.groups.settings']
 CLIENT_SECRET_FILE = 'client_secret.json'
 APPLICATION_NAME = 'List Groups with external access'
