The privileges obtained from third parties providing OAuth authentication make the Admin panel an "App" to these third parties, meaning the "App" is assigned a level of privileges with the consent of the user.

The minimum privilege level tends to be a "read user metadata information", such as the screen name for a Twitter/Facebook/Google account, but could include access requests to post on the users behalf, and/or even gain access to one's Google Drive.

For those third party OAuth providers where messaging is an option, we may consider requesting from the user, consent to "advertise" the fact they have just switched to Kolab Now.

This usually results in different OAuth "client" credentials needing to be used, or in terms of implementation, a different engine altogether, as well as saving off the OAuth grant tokens (which we do not currently do).

The decision on whether this is on the horizon should be made earlier rather than later.