IT Admin Change Calendar Google Workspace
Users can request admin access to blocked unconfigured third-party apps
From August 14, 2025, users blocked from unconfigured third-party apps can request admin access instead of a hard block; on by default per OU.
Product
Google Workspace (API controls)
Announced
14 August 2025
Effective from
14 August 2025
Who is affected
Organizations using App Access Control to govern third-party apps that use OAuth to access Google Workspace data.
Admin roles to involve: Google Workspace super admin, Security admin
Why no action is required
Be aware that, by default, users who hit an unconfigured third-party app now see an access-request screen and can submit a request to admins (rather than only a block). Review incoming app-access requests in the Admin console under API Controls, and decide per OU whether to keep the request workflow enabled. Pair this with app allowlisting and per-scope controls for Google API access.
What happens if this is ignored
Admins may receive new app-access requests they do not triage, and unreviewed requests can leave users blocked or lead to over-broad approvals.
Official source
Approval workflow for enterprise users to request access to unconfigured apps
Published by Google · Source dated 14 August 2025 · Checked 24 August 2026
Last verified 24 August 2026
Related changes
- Multi-party approvals available for sensitive Admin console actions (9 April 2024)
- Gmail enforces authentication requirements for bulk senders (1 February 2024)
- Less secure apps and Google Sync password-only access turned off (15 June 2024)