I want to set up an OAuth2.0 flow for users that have access to GCP.

The user will login to a web app.

Then, the OAuth2.0 flow will need to ask for the consent that will allow the app to perform things on their behalf, based on their permissions.

Therefore, the scopes that need to be requested should be those that cover their actual permissions on GCP.

Is something like that possible when it comes to OAuth2.0 and GCP?