title: Container bound apps script deploy from manifest can allow other user read data from container spreadsheet without sharing file
body: <p>I am developing chatbot through container (Spreadsheet) bound apps script deploy from manifest for may internal organization members, the members can request info stored on the sheets by simply typing and sending through google chat.</p>
  <p>Members can get the info automatically by the chatbot if I share the spreadsheet, otherwise the bot is not responding message replied.</p>
  <p>When I share the file, the shard copy also appear to all of the members drive too. I want make that content read by user without sharing the Container spreadsheet.</p>
  <p>What code I have to add to my script so that user get the permission to read my file during chatting. Is this possible?</p>
  <p>My manifest code is as follows</p>
  <pre><code>{
    &quot;dependencies&quot;: {
      &quot;enabledAdvancedServices&quot;: [
        {
          &quot;userSymbol&quot;: &quot;Sheets&quot;,
          &quot;serviceId&quot;: &quot;sheets&quot;,
          &quot;version&quot;: &quot;v4&quot;
        }
      ],
      &quot;libraries&quot;: [
        {
          &quot;userSymbol&quot;: &quot;OAuth2&quot;,
          &quot;libraryId&quot;: &quot;1B7FSrk5Zi6L1rSxxTDgDEUsPzlukDsi4KGuTMorsTQHhGBzBkMun4iDF&quot;,
          &quot;version&quot;: &quot;40&quot;
        }
      ]
    },
   
    &quot;exceptionLogging&quot;: &quot;STACKDRIVER&quot;,
    &quot;runtimeVersion&quot;: &quot;V8&quot;,
    &quot;chat&quot;: {
      &quot;addToSpaceFallbackMessage&quot;: &quot;Hi ! Thanks for adding me. Type help to get more..&quot;
    }
  }
  </code></pre>
  <p>and user oauth2 ..</p>
  <pre><code>/**
   * Configures the Chatbot service.
   */
  function getChatbotService() {
   return OAuth2.createService(&quot;chat-sheet-bot&quot;)
   // Set the endpoint URL.
   .setTokenUrl(&quot;https://accounts.google.com/o/oauth2/token&quot;)
  // Set the private key and issuer.
   .setPrivateKey(PRIVATE_KEY)
   .setIssuer(CLIENT_EMAIL)
  // Set the property store where authorized tokens should be persisted.
   .setPropertyStore(PropertiesService.getScriptProperties())
  // Set the scope.
   .setScope(&quot;https://www.googleapis.com/auth/chat.bot https://www.googleapis.com/auth/spreadsheets&quot;);
  }
  </code></pre>