When we use a tool like gcloud or IAP Desktop for the first time, we need to authorize it. Google Sign-in then shows us a consent screen that lists all the things the tool might do on our behalf (or more precisely, which scopes we’re authorizing), and and we can decide whether to consent or deny. In the case of gcloud, the consent screen looks like this: Notice that we only have two choices: We can consent to all four scopes by clicking Allow, or we can cancel the process. There’s no inte...
