---
"@googleworkspace/cli": patch
---

Filter out `apps.alerts` scopes from user OAuth login flow since they require service account with domain-wide delegation