From 7235022a8e17978b4675074275f5875a59eb6a04 Mon Sep 17 00:00:00 2001
From: Jay Lee <jay0lee@gmail.com>
Date: Mon, 2 Jun 2025 12:47:44 +0000
Subject: [PATCH] downscope IAM and off by default

---
 src/gam/gamlib/glapi.py | 3 ++-
 1 file changed, 2 insertions(+), 1 deletion(-)

diff --git a/src/gam/gamlib/glapi.py b/src/gam/gamlib/glapi.py
index 5efc94d7..8da755d1 100644
--- a/src/gam/gamlib/glapi.py
+++ b/src/gam/gamlib/glapi.py
@@ -647,8 +647,9 @@ _SVCACCT_SCOPES = [
    'scope': 'https://www.googleapis.com/auth/gmail.settings.sharing'},
   {'name': 'Identity and Access Management API',
    'api': IAM,
+   'offByDefault': True,
    'subscopes': [],
-   'scope': CLOUD_PLATFORM_SCOPE},
+   'scope': 'https://www.googleapis.com/auth/iam'},
   {'name': 'Keep API',
    'api': KEEP,
    'subscopes': READONLY,