Google Workspace permission, in plain English

What can an AI agent do with
Change Gmail settings and filters?

The agent can change your Gmail settings and create filters that act on new mail automatically. Filters can label, archive, trash or forward incoming email.

How to spot it

On a Google Workspace connection or settings screen, this is https://www.googleapis.com/auth/gmail.settings.basic.

Strongest thing it allows: Admin-level access.

With it, an agent can

  • Create filters that label, archive or trash incoming mail
  • Create filters that forward mail to a verified forwarding address
  • Turn on or change your vacation auto reply
  • Permanently delete your existing filters

It cannot, on its own

  • Add a brand new forwarding address. Google limits that to a separate administrator permission.
  • Read your email with this permission alone

What a bad day looks like

A bad filter runs on every new email, so it could quietly trash or forward customer mail until someone spots it.

Set it up safer

Ask the company selling the agent

Source

Checked against Google Workspace documentation on 2026-09-28. All Google Workspace permissions →

Thinking about a specific agent?

Tell us what it connects to, what it is allowed to do and who approves its work. You get a plain-language label of what it can touch and what to ask the seller. It takes a couple of minutes, and your answers stay in your browser unless you choose to post a test job.

Or have a person go through the AI apps on up to 3 of your business services with you and get a written report, for $249.

This page explains what a permission allows. It does not describe, test or rate any product. Permission details are summarized in our own words from the provider's documentation, linked on the page; providers change their documentation, so check the source before you rely on a detail.