Microsoft 365 (Microsoft Graph) permission, in plain English

What can an AI agent do with
Read and write your Teams chats (Chat.ReadWrite, delegated)?

It can read your one-on-one and group chats in Microsoft Teams and write in them, including posting messages as you.

How to spot it

On a Microsoft 365 (Microsoft Graph) connection or settings screen, this is Chat.ReadWrite.

Strongest thing it allows: Can send as you.

With it, an agent can

  • Read your one-on-one and group chat messages
  • Post messages in your chats under your name

It cannot, on its own

  • Post in Teams channels (that is a separate permission, ChannelMessage.Send)

What a bad day looks like

If a message tricks the agent, it could post a wrong answer or a bad link to a coworker that looks like you wrote it.

Set it up safer

Narrower permissions on Microsoft 365 (Microsoft Graph):

Ask the company selling the agent

Source

Checked against Microsoft 365 (Microsoft Graph) documentation on 2026-09-28. All Microsoft 365 (Microsoft Graph) permissions →

Thinking about a specific agent?

Tell us what it connects to, what it is allowed to do and who approves its work. You get a plain-language label of what it can touch and what to ask the seller. It takes a couple of minutes, and your answers stay in your browser unless you choose to post a test job.

Or have a person go through the AI apps on up to 3 of your business services with you and get a written report, for $249.

This page explains what a permission allows. It does not describe, test or rate any product. Permission details are summarized in our own words from the provider's documentation, linked on the page; providers change their documentation, so check the source before you rely on a detail.