What can an AI agent do with
Read your email (Mail.Read, delegated)?
It can open and read every email in your mailbox, including the full message and attachments. It acts as you, so it only sees your own mailbox.
How to spot it
On a Microsoft 365 (Microsoft Graph) connection or settings screen, this is Mail.Read.
With it, an agent can
- Read the full text of every email in your mailbox
- Open attachments on your emails
- See who you email and what you write about
It cannot, on its own
- Send email
- Delete, move, or change your emails
- Read other people's mailboxes in this delegated form
What a bad day looks like
A tricked agent could read private customer emails or password reset links and repeat them in its replies or reports.
Set it up safer
- If the agent only needs to sort or summarize by sender and subject, ask for Mail.ReadBasic, which leaves out the message body and attachments.
- Connect a separate mailbox that only receives the email the agent needs, instead of your main inbox.
Ask the company selling the agent
- Why does the agent need the full message and attachments, not just the sender and subject?
- Do you keep copies of my emails, and for how long?
- Who at your company can see what the agent reads?
Source
Checked against Microsoft 365 (Microsoft Graph) documentation on 2026-09-28. All Microsoft 365 (Microsoft Graph) permissions →
Thinking about a specific agent?
Tell us what it connects to, what it is allowed to do and who approves its work. You get a plain-language label of what it can touch and what to ask the seller. It takes a couple of minutes, and your answers stay in your browser unless you choose to post a test job.
Or have a person go through the AI apps on up to 3 of your business services with you and get a written report, for $249.
This page explains what a permission allows. It does not describe, test or rate any product. Permission details are summarized in our own words from the provider's documentation, linked on the page; providers change their documentation, so check the source before you rely on a detail.