What can an AI agent do with
Send email as you (Mail.Send, delegated)?
It can send email from your address. People who get it will see it as coming from you.
How to spot it
On a Microsoft 365 (Microsoft Graph) connection or settings screen, this is Mail.Send.
With it, an agent can
- Send new emails from your address
- Send email to anyone, not just people you already know
It cannot, on its own
- Read your inbox with this permission alone (that needs Mail.Read)
- Send from shared mailboxes or on behalf of coworkers (that needs Mail.Send.Shared)
What a bad day looks like
If a malicious email tricks the agent, it could send your customers a fake invoice or a bad link that looks like it came from you.
Set it up safer
- Ask for an approval step so you see and approve each email before it goes out.
- Connect a separate address, like a support account, instead of your personal one.
Ask the company selling the agent
- Does every email wait for my approval before it sends?
- Is there a limit on how many emails the agent can send in a day?
- Can I see a list of every email it sent as me?
Source
Checked against Microsoft 365 (Microsoft Graph) documentation on 2026-09-28. All Microsoft 365 (Microsoft Graph) permissions →
Thinking about a specific agent?
Tell us what it connects to, what it is allowed to do and who approves its work. You get a plain-language label of what it can touch and what to ask the seller. It takes a couple of minutes, and your answers stay in your browser unless you choose to post a test job.
Or have a person go through the AI apps on up to 3 of your business services with you and get a written report, for $249.
This page explains what a permission allows. It does not describe, test or rate any product. Permission details are summarized in our own words from the provider's documentation, linked on the page; providers change their documentation, so check the source before you rely on a detail.