The security review team checks that your add-on requests the correct OAuth scopes. Ensure that the following scopes have been configured on the Google Workspace Marketplace SDK configuration screen:
auth/userinfo.email(added by default)auth/userinfo.profile(added by default)classroom.addons.teacherclassroom.addons.student
Ensure also that the following scopes are requested by your add-on:
classroom.addons.teacherclassroom.addons.student
You must also create a video demonstrating the add-on's consent screen with the scopes presented to users and the basic functions of the add-on. You then upload it as an unlisted video to YouTube; an unlisted video can only be reached using its link. You're prompted for the video link when starting the OAuth verification process. The security team then views the video when reviewing your add-on.
For more details on Google's security review, visit OAuth API verification FAQs.