What can an AI agent do with
Full Google Drive access?
The agent can open, download, change, share and delete any file in your Google Drive. Some deletes skip the trash and are permanent.
How to spot it
On a Google Workspace connection or settings screen, this is https://www.googleapis.com/auth/drive.
With it, an agent can
- Open and download every file in your Drive
- Upload new files and edit existing ones
- Share files and folders with other people
- Permanently delete files you own, skipping the trash
- Permanently delete shared drive files in folders you organize
- Empty your Drive trash
It cannot, on its own
- Read your Gmail, Calendar or Contacts. Those need separate permissions.
What a bad day looks like
A tricked agent could share a folder of contracts or payroll files with an outside address, or permanently delete a folder along with the files in it that you own.
Set it up safer
- Ask whether it can use https://www.googleapis.com/auth/drive.file, which only reaches files you pick or it creates.
- If it only reads, ask for https://www.googleapis.com/auth/drive.readonly.
- Keep payroll, legal and banking files in a separate account the agent is not connected to.
Narrower permissions on Google Workspace:
- Only files you pick or it creates
https://www.googleapis.com/auth/drive.file - View and download all Drive files
https://www.googleapis.com/auth/drive.readonly
Ask the company selling the agent
- Why do you need every file instead of only the ones I pick?
- Will it ever share files or change who can see them?
- Can it permanently delete files, and can I turn that off?
Source
Checked against Google Workspace documentation on 2026-09-28. All Google Workspace permissions →
Thinking about a specific agent?
Tell us what it connects to, what it is allowed to do and who approves its work. You get a plain-language label of what it can touch and what to ask the seller. It takes a couple of minutes, and your answers stay in your browser unless you choose to post a test job.
Or have a person go through the AI apps on up to 3 of your business services with you and get a written report, for $249.
This page explains what a permission allows. It does not describe, test or rate any product. Permission details are summarized in our own words from the provider's documentation, linked on the page; providers change their documentation, so check the source before you rely on a detail.