Add missing OAuth scope to the Add Supervision flow.

Bug: 927957
Change-Id: I5919885840a41ffec4e458382158aa40747bd64c
Reviewed-on: https://chromium-review.googlesource.com/c/chromium/src/+/1760420Reviewed-by: Roger Tawa <rogerta@chromium.org>
Reviewed-by: Michael Giuffrida <michaelpg@chromium.org>
Commit-Queue: Felipe Cerqueira <cerqueira@google.com>
Cr-Commit-Position: refs/heads/master@{#688617}

chrome/browser/ui/webui/chromeos/add_supervision/add_supervision_handler.cc

@@ -75,6 +75,7 @@ void AddSupervisionHandler::GetOAuthToken(GetOAuthTokenCallback callback) {
   scopes.insert(GaiaConstants::kKidsSupervisionSetupChildOAuth2Scope);
   scopes.insert(GaiaConstants::kPeopleApiReadOnlyOAuth2Scope);
   scopes.insert(GaiaConstants::kAccountsReauthOAuth2Scope);
+  scopes.insert(GaiaConstants::kAuditRecordingOAuth2Scope);
 
   oauth2_access_token_fetcher_ =
       identity_manager_->CreateAccessTokenFetcherForAccount(

google_apis/gaia/gaia_constants.cc

@@ -64,6 +64,10 @@ const char kPeopleApiReadOnlyOAuth2Scope[] =
 const char kAccountsReauthOAuth2Scope[] =
     "https://www.googleapis.com/auth/accounts.reauth";
 
+// OAuth scope for access to audit recording (ARI).
+const char kAuditRecordingOAuth2Scope[] =
+    "https://www.googleapis.com/auth/auditrecording-pa";
+
 // Used to mint uber auth tokens when needed.
 const char kGaiaSid[] = "sid";
 const char kGaiaLsid[] = "lsid";

google_apis/gaia/gaia_constants.h

@@ -35,6 +35,7 @@ extern const char kGoogleUserInfoEmail[];
 extern const char kGoogleUserInfoProfile[];
 extern const char kPeopleApiReadOnlyOAuth2Scope[];
 extern const char kAccountsReauthOAuth2Scope[];
+extern const char kAuditRecordingOAuth2Scope[];
 
 // Used with uber auth tokens when needed.
 extern const char kGaiaSid[];