workspace-administrator video for the company has a custom internal messaging app that requires access to the Google Workspace Directory API to retrieve user
The company has a custom internal messaging app that requires access to the Google Workspace Directory API to retrieve user details. However, as a Google Workspace Super Admin, you need to ensure this app doesn't have unnecessary access to other Workspace services. What is the most appropriate action to take?