What can an AI agent do with
Full access to every file you can reach (Files.ReadWrite.All, delegated)?
It can open, add, change, and delete every file you can reach. That includes your OneDrive, files others shared with you, and files you can access through a team or group.
How to spot it
On a Microsoft 365 (Microsoft Graph) connection or settings screen, this is Files.ReadWrite.All.
With it, an agent can
- Read any file you are able to open
- Upload and edit files in shared folders you can edit
- Delete files anywhere you have the right to delete
It cannot, on its own
- Reach files you yourself cannot open
What a bad day looks like
One bad instruction could change or delete files that belong to your whole team, not just you.
Set it up safer
- If it only needs your own files, ask for Files.ReadWrite.
- If it only reads, ask for Files.Read.All.
- If it only needs certain sites, ask for Sites.Selected, so your admin picks which sites it can reach.
Narrower permissions on Microsoft 365 (Microsoft Graph):
- Full access to your own files (Files.ReadWrite, delegated)
Files.ReadWrite
Ask the company selling the agent
- Why does the agent need files beyond my own OneDrive?
- Will it ever edit or delete files that other people own?
- Can I limit it to one folder or site?
Source
Checked against Microsoft 365 (Microsoft Graph) documentation on 2026-09-28. All Microsoft 365 (Microsoft Graph) permissions →
Thinking about a specific agent?
Tell us what it connects to, what it is allowed to do and who approves its work. You get a plain-language label of what it can touch and what to ask the seller. It takes a couple of minutes, and your answers stay in your browser unless you choose to post a test job.
Or have a person go through the AI apps on up to 3 of your business services with you and get a written report, for $249.
This page explains what a permission allows. It does not describe, test or rate any product. Permission details are summarized in our own words from the provider's documentation, linked on the page; providers change their documentation, so check the source before you rely on a detail.