Third-party apps with account access - How to properly check what they can do?

[Marcus1]

Hello Community

I have some Third-party apps with account access, like this:

I would like to know what exactly means by "View domains related to your customers", "See info about users on your domain", etc.

The way I do it is I go to :
https://developers.google.com/identity/protocols/oauth2/scopes

And look for the text string. Then I see what scope it exactly is. In this case, all the scopes seem to be readonly.

Is this the best way to make sure what you see on the screenshot matches the real scopes?

Thanks!