What can an AI agent do with
Change your mailbox settings and inbox rules (MailboxSettings.ReadWrite, delegated)?
It can change how your mailbox behaves. That includes your automatic out-of-office reply and inbox rules, such as a rule that forwards incoming mail to another address.
How to spot it
On a Microsoft 365 (Microsoft Graph) connection or settings screen, this is MailboxSettings.ReadWrite.
With it, an agent can
- Turn on or change your automatic replies
- Create inbox rules that act on incoming mail, including forwarding it
- Change settings like your time zone and working hours
It cannot, on its own
- Send email directly (the permission does not include sending), though a forwarding rule it creates can pass your incoming mail along
What a bad day looks like
A tricked agent could quietly add a rule that forwards every incoming invoice to an outside address, and you might not notice for weeks.
Set it up safer
- If it only needs your time zone or working hours, ask for MailboxSettings.Read.
- After connecting, check your inbox rules in Outlook and look again from time to time.
Ask the company selling the agent
- Why does the agent need to change my mailbox settings?
- Will it ever create inbox rules or forwarding, and can I block that?
- Will it tell me when it changes my out-of-office reply?
Source
Checked against Microsoft 365 (Microsoft Graph) documentation on 2026-09-28. All Microsoft 365 (Microsoft Graph) permissions →
Thinking about a specific agent?
Tell us what it connects to, what it is allowed to do and who approves its work. You get a plain-language label of what it can touch and what to ask the seller. It takes a couple of minutes, and your answers stay in your browser unless you choose to post a test job.
Or have a person go through the AI apps on up to 3 of your business services with you and get a written report, for $249.
This page explains what a permission allows. It does not describe, test or rate any product. Permission details are summarized in our own words from the provider's documentation, linked on the page; providers change their documentation, so check the source before you rely on a detail.