google oauth - Can I publish an app that uses a restricted scope to the GSuite Workspace Marketplace without going through Security Review?

Question

We have a web application that integrates with Gmail and Google Calendar using some restricted scopes (e.g. gmail.readOnly). We went through the verification process, however we decided to forego the expensive security review process since our application is targeted for GSuite Enterprise Customers only (e.g. requires our customers to allowlist the application).

I would like to now get the application listed on the Google Workspace Marketplace and have filled out the required Store Listing settings to do so, however every time I submit it simply gets rejected with a reason of (Rejected).

According to the documentation for OAuth review, it states:

Users are Enterprise Accounts: If only Google Workspace accounts use your app, a Google Workspace domain administrator can enable your app via domain install or whitelisting. Your app can also be listed on the Google Workspace Marketplace.

https://support.google.com/cloud/answer/9110914?hl=en#zippy=%2Csecurity-assessment%2Cwhen-is-the-security-assessment-not-required

I do not receive any communication when the store listing is rejected and so I am curious if someone can tell my why the app keeps getting rejected.

Thank You

Answer 1

等待大神答复