What can an AI agent do with
Full access to your contacts (Contacts.ReadWrite, delegated)?
It can read your Outlook contacts and add, change, or delete them.
How to spot it
On a Microsoft 365 (Microsoft Graph) connection or settings screen, this is Contacts.ReadWrite.
With it, an agent can
- Read your saved contacts
- Add new contacts
- Edit existing contacts
- Delete contacts
It cannot, on its own
- Email your contacts (that needs Mail.Send)
What a bad day looks like
A faulty sync could overwrite or delete your customer contact list in one pass.
Set it up safer
- If it only needs to look people up, ask for Contacts.Read.
Ask the company selling the agent
- Do you copy my contacts into your own systems?
- Why does the agent need to change or delete contacts instead of just reading them?
Source
Checked against Microsoft 365 (Microsoft Graph) documentation on 2026-09-28. All Microsoft 365 (Microsoft Graph) permissions →
Thinking about a specific agent?
Tell us what it connects to, what it is allowed to do and who approves its work. You get a plain-language label of what it can touch and what to ask the seller. It takes a couple of minutes, and your answers stay in your browser unless you choose to post a test job.
Or have a person go through the AI apps on up to 3 of your business services with you and get a written report, for $249.
This page explains what a permission allows. It does not describe, test or rate any product. Permission details are summarized in our own words from the provider's documentation, linked on the page; providers change their documentation, so check the source before you rely on a detail.