Read the requested scope
A calendar helper might request calendar access, while a storage integration might request access to files. The permission request describes what the app could do, not merely what you expect it to do. Broad access should have a clear purpose connected to your task.
Access can outlast the session
An integration may use tokens to act after the initial sign-in. Closing its browser tab does not necessarily remove permission. Services usually provide a way to review connected apps and revoke access, though the settings and effects differ by provider.
Review before and after use
Suppose a one-time document converter requests ongoing access to all stored files. Consider whether an approved tool with narrower access can meet the need. Revoking an integration can stop future access, but may not erase copies of data the app already received.
- Check the publisher and permission description.
- Avoid connecting work accounts to unapproved apps.
- Remove integrations that no longer serve a purpose.