Hi @buzzrick, thanks for contacting.
Indeed, the endpoint wont be reachable unless you use the access level described in the documentation.
You have two paths from there:
- You escalate the permisions, indeed allowing for anonymous access (this can be enabled in the Google admin console from Google Apps).
- You deploy the webapp on a different google account where you can apply the less restrictive permissions, and share the spreadsheet with that account.
Hope it helps :)