* Navigate to the Google Admin console at admin.google.com.
* From the Admin console Home page, go to "Security" and then to "API controls."
* In the "API controls" section, click on "Manage Third-Party App Access."
* Here, you can add the OAuth Client ID of your internal app to the trusted list. This ensures that only apps you have vetted and approved can access Google Drive APIs, complying with your security policy.
* Enter the OAuth Client ID of the new app and save the changes.
This process ensures that the new, internal, domain-owned app can access Google Drive APIs without compromising the security policies in place.
References:
* Google Workspace Admin Help - Manage API client access