> ## Documentation Index
> Fetch the complete documentation index at: https://docs.delegmate.com/llms.txt
> Use this file to discover all available pages before exploring further.

# Permissions

> Exactly what you grant Delegmate in the Google Admin console, and why.

Delegmate uses domain-wide delegation, which is powerful, so here's precisely how it's used. **A teammate only ever works as its own account.** It never opens a person's mailbox, calendar or drive, and it sees only what's shared with it or sent to it. Anything that acts on your organisation's users runs as one of your admins, and only ever on a teammate's own account.

## The scopes

| Scope | What it's for |
| - | - |
| `gmail.modify` | Its own mail: read, label, send and watch. Not permanent deletion. |
| `calendar` | Its own calendar |
| `drive` | Its own Drive, and the files people share with it. Also Docs, Sheets, Slides and Forms. |
| `chat.messages`, `chat.spaces`, `chat.memberships` | Its own Chat conversations, and hearing about new messages |
| `meetings.space.readonly` | Recordings and transcripts of meetings it was in |
| `tasks` | Its own Google Tasks, including what people assign it |
| `contacts`, `directory.readonly` | Its contacts, and looking colleagues up in your directory |
| `admin.directory.user.readonly` | Reading who your admins are, as one of them, once an hour |
| `admin.directory.user`, `admin.directory.user.security` | Creating a teammate's account when an admin adds one, and signing it back in if its browser is signed out. Only ever on teammates' own accounts. |
| `admin.directory.orgunit` | Making the **Delegmate** organisational unit teammates live in |

Scopes are requested one service at a time, so if one is missing, only what needs it stops working, and the setup page tells you which.

## Take it back

Remove the Delegmate entry in the Google Admin console, under **Security**, **Access and data control**, **API controls**, **Domain-wide delegation**. Teammates stop working straight away. If access isn't restored, your data is deleted 30 days later.

## More on security

See [delegmate.com/security](https://delegmate.com/security) for encryption and how your data is handled, and our [privacy policy](https://delegmate.com/privacy) for who processes it.


This documentation is built and hosted on [Mintlify](https://mintlify.com), a developer documentation platform.