Google identity and Google Ads
openid, email, and
https://www.googleapis.com/auth/adwords
Labels the connected Google identity; lists accessible Ads accounts; reads campaign, conversion, targeting, asset, budget, policy, search-term, and performance data; creates diagnostics, reports, monitoring results, and plans; and supports explicitly approved account changes. Google Ads offers one scope for both read and write API operations, so new connections remain read-only inside MarketingLeague until a user changes that mode.