Google Workspace permission, in plain English

What can an AI agent do with
Write drafts and send email?

The agent can create, edit and send drafts, and send new email as you. It can also see your drafts. It cannot read the rest of your inbox.

How to spot it

On a Google Workspace connection or settings screen, this is https://www.googleapis.com/auth/gmail.compose.

Strongest thing it allows: Can send as you.

With it, an agent can

  • Create and edit drafts
  • Send drafts and new email from your address
  • Read your existing drafts
  • Permanently delete drafts

It cannot, on its own

  • Read the email in your inbox
  • Trash or delete email you received
  • Change your settings or filters

What a bad day looks like

Even if you expect it to only save drafts, this permission lets it press send, so a tricked agent could email anyone in your name.

Set it up safer

Narrower permissions on Google Workspace:

Ask the company selling the agent

Source

Checked against Google Workspace documentation on 2026-09-28. All Google Workspace permissions →

Thinking about a specific agent?

Tell us what it connects to, what it is allowed to do and who approves its work. You get a plain-language label of what it can touch and what to ask the seller. It takes a couple of minutes, and your answers stay in your browser unless you choose to post a test job.

Or have a person go through the AI apps on up to 3 of your business services with you and get a written report, for $249.

This page explains what a permission allows. It does not describe, test or rate any product. Permission details are summarized in our own words from the provider's documentation, linked on the page; providers change their documentation, so check the source before you rely on a detail.