What can an AI agent do with
Send email as anyone in your company (Mail.Send, application)?
This is the company-wide version. It can send email as any person in your organization, with nobody signed in. Recipients will see it as coming from that person.
How to spot it
On a Microsoft 365 (Microsoft Graph) connection or settings screen, this is Mail.Send. The consent screen words it as Send mail as any user
With it, an agent can
- Send email from any employee's address
- Send email at any hour with nobody signed in
It cannot, on its own
- Read or delete email (those need other permissions)
- Be approved by a regular user; only a Global Administrator or Privileged Role Administrator can approve it
What a bad day looks like
A tricked or hijacked agent could email your customers or your bank from your bookkeeper's address and ask them to change payment details.
Set it up safer
- Use the delegated Mail.Send instead, which only sends as the person who signed in.
- If it must run on its own, have your admin skip the company-wide grant and instead use RBAC for Applications in Exchange Online to allow sending from only the one mailbox it needs. Granting both does not limit it.
- Require your approval before any email goes out.
Narrower permissions on Microsoft 365 (Microsoft Graph):
Ask the company selling the agent
- Which addresses will the agent send from, and why would it need more than one?
- Can the agent work with access limited to a single mailbox?
- What stops it from sending as me or my finance person?
Source
Checked against Microsoft 365 (Microsoft Graph) documentation on 2026-09-28. All Microsoft 365 (Microsoft Graph) permissions →
Thinking about a specific agent?
Tell us what it connects to, what it is allowed to do and who approves its work. You get a plain-language label of what it can touch and what to ask the seller. It takes a couple of minutes, and your answers stay in your browser unless you choose to post a test job.
Or have a person go through the AI apps on up to 3 of your business services with you and get a written report, for $249.
This page explains what a permission allows. It does not describe, test or rate any product. Permission details are summarized in our own words from the provider's documentation, linked on the page; providers change their documentation, so check the source before you rely on a detail.