In plain language
When you connect an app, scopes are the list of things you are allowing it to do.
Example
A reporting automation requests a read-only spreadsheet scope instead of full access to Google Drive.
Related terms
OAuth · Access Token · Authentication · API Key
Common misconception
More scopes are not safer “just in case”; extra permissions increase the damage a leaked token can do.
Implementation guidance
Request the minimum scopes needed, review them when reconnecting, document why each is required, and expect to reconnect when new scopes are added.