The Add-on must be run as a Super Administrator (or a user with reporting privileges) of a Google Workspace Domain. The Add-on uses the Admin Reports API to return drive information onto a Google Sheet which is custom filteres to only return Google Meet information. No data is transferred outside of Google or shared with any other 3rd parties through use of this tool.
The tool requests authorisation of 6 API scopes. Below oulines the purpose of these requests and how each scope it utilised:
https://www.googleapis.com/auth/script.container.ui
This scope is required to utilise the Add-on menu to serve HTML content within the Google Sheet sidebar.
https://www.googleapis.com/auth/spreadsheets
The Spreadsheets API is utilised to interact with the Google Sheet that the add-on is executing in. It copies a number of pre-formatted template Sheets from a publicly hosted Template file, and then populates your version with the relevant content from your Admin Reports.
No other Spreadsheets in your Drive or domain are interacted with as part of the Add-on.
https://www.googleapis.com/auth/userinfo.email
The Add-on captures your email address in order to send you a notifcation email when the report is complete. Your email address is not used for any other purpose and is not sent to Google or any other 3rd party as part of your interaction with this Add-on.
https://www.googleapis.com/auth/admin.reports.audit.readonly
The Add-on runs the Admin Reports API to return Drive activity within your Workspace tenant from the last 180 days. The Add-on returns this information to the Google Sheet and includes file names, dates, users and view activity.
https://www.googleapis.com/auth/script.scriptapp
Google Apps Script (the back end of Google Workspace Editor Add-ons) have maximum execution times of 30 minutes. For really large Workspace instances, the Drive Report API may take longer to fully execute than 30 minutes. The Add-on handles this through a process of stopping executions and then restarting using a process of setting triggers to restart a function in the future. Once the report has fully executed and finished, any triggers associated with the Spreadsheet are deleted.
https://www.googleapis.com/auth/script.send_mail
This allows the add-on to send yourself a notification email once the report has completed. No other access to your emails is granted to the Add-on.