What can an AI agent do with
Only files you pick or it creates?
The agent can only reach Drive files it creates or files you choose to open with it. Within those files, it can read, edit, share and delete. Google recommends this narrower option for most apps.
How to spot it
On a Google Workspace connection or settings screen, this is https://www.googleapis.com/auth/drive.file.
With it, an agent can
- Create new files in your Drive
- Read and edit files you pick for it
- Share those files with other people
- Permanently delete those files if you own them, skipping the trash
It cannot, on its own
- See or open the other files in your Drive
What a bad day looks like
The files you hand it are still at risk, so a tricked agent could change, share or permanently delete them.
Set it up safer
- Only pick the files the task actually needs.
- Keep a copy of important files before letting it edit them.
Ask the company selling the agent
- Which files will it ask me to pick, and why?
- Will it share any file with other people?
Source
Checked against Google Workspace documentation on 2026-09-28. All Google Workspace permissions →
Thinking about a specific agent?
Tell us what it connects to, what it is allowed to do and who approves its work. You get a plain-language label of what it can touch and what to ask the seller. It takes a couple of minutes, and your answers stay in your browser unless you choose to post a test job.
Or have a person go through the AI apps on up to 3 of your business services with you and get a written report, for $249.
This page explains what a permission allows. It does not describe, test or rate any product. Permission details are summarized in our own words from the provider's documentation, linked on the page; providers change their documentation, so check the source before you rely on a detail.