An organization enables OAuth App access restrictions. What is the immediate administrative effect?
Select an answer to reveal the explanation.
Short Explanation
OAuth App restrictions mean third-party OAuth apps need org approval before they touch org resources. Apps, SSH rotation, and Dependabot are different knobs.
Full Explanation
OAuth App access restrictions prevent unauthorized third-party OAuth applications from reading or modifying organization-owned resources until an owner approves the app. This is a foundational governance control for supply-chain and data-exfiltration risk from overly broad classic OAuth scopes. Enabling restrictions does not mass-delete GitHub Apps, does not auto-rotate SSH keys daily, and does not disable Dependabot. Owners should establish an app review process, prefer GitHub Apps with least privilege where possible, and periodically re-certify approved integrations. Members should be guided to request approval rather than using personal workarounds that bypass policy.