# Step 6: Add calendar.readonly Scope (Navigate Back)

## Problem
You created the OAuth consent screen but need to **go back and add the scope**.

## How to Find the Scopes Page

**Method 1: From OAuth Consent Screen (Easiest)**

1. In Google Cloud Console, make sure you're in project `hoffmann-icarus`
2. Left sidebar: **"APIs & Services"** → **"OAuth consent screen"**
3. You should see your app "Icarus Family Assistant" listed
4. Click on **"Icarus Family Assistant"** (or the edit/pencil icon)
5. You'll be back in the setup wizard
6. Click **"Edit"** next to **"Scopes"** (or click **"Scopes"** in the top tabs)
7. Click **"Add or Remove Scopes"**
8. Filter box: type **"calendar.readonly"**
9. Check the box for: `https://www.googleapis.com/auth/calendar.readonly`
10. Click **"Update"**
11. Click **"Save and Continue"**

**Method 2: If You See the Full Wizard**

1. You might be on the "App information" step
2. Look at the **top of the page** — there are tabs/steps:
   - **App information** ← You might be here
   - **Scopes** ← Click this
   - **Test users**
3. Click **"Scopes"**
4. Click **"Add or Remove Scopes"**
5. Filter: type **"calendar.readonly"**
6. Check the box for `https://www.googleapis.com/auth/calendar.readonly`
7. Click **"Update"**
8. Click **"Save and Continue"**

## What You Should See on Scopes Page

The scopes table should show:

| Scope | User-facing description |
|-------|------------------------|
| `https://www.googleapis.com/auth/calendar.readonly` | View your calendars |

**AND NOTHING ELSE.** If you see `calendar` (without `.readonly`), that's wrong — remove it.

## Common UI Layout

```
┌─────────────────────────────────────────┐
│  OAuth consent screen                   │
├─────────────────────────────────────────┤
│                                         │
│  [App information] [Scopes] [Test users]│  ← Click "Scopes"
│                                         │
│  Your non-sensitive scopes              │
│  ┌─────────────────────────────────┐    │
│  │ Add or Remove Scopes            │    │  ← Click this
│  └─────────────────────────────────┘    │
│                                         │
│  Your sensitive scopes                    │
│  (should show calendar.readonly here)    │
│                                         │
└─────────────────────────────────────────┘
```

## Screenshot Description (What to Look For)

**After clicking "Add or Remove Scopes":**
- A panel slides out from the right
- **Filter** box at the top — type "calendar.readonly"
- **Table** shows matching scopes:
  - Row: `https://www.googleapis.com/auth/calendar.readonly`
  - Description: "See and download any calendar you can access using your Google Calendar"
  - Checkbox: ☐ (unchecked)
- **Check the checkbox**
- Click **"Update"** at bottom
- Back on main scopes page, click **"Save and Continue"**

## Still Can't Find It?

**Alternative path:**
1. Left sidebar: **"IAM & Admin"** → **"Settings"**
2. Or search the top search bar for **"OAuth"** and select "OAuth consent screen"

**If the scopes tab is grayed out:**
- You might need to complete "App information" first
- Fill in app name, user support email, developer contact
- Click "Save and Continue"
- Then scopes tab should be clickable

## After This

Once `calendar.readonly` is added:
1. Click through to "Test users" tab
2. Add `hoffmann.family.manager@gmail.com` as test user
3. Click "Save and Continue"
4. Then proceed to Step 4 (Create Credentials)