Outlook Mail: what this connector can do

Member·6 minutes to read

What this page is for

The setup guide is for whoever runs your organisation's Botseon deployment: how to register Botseon with the provider so its sign-in screen works. This page is the other half: what Outlook Mail actually lets a bot do once it is connected to your account, what it asks you for along the way, its limits, and how to take the connection away again, in Botseon and at Microsoft.

Mail across your Microsoft 365 account: search, read, draft, send and manage messages and folders.

What a bot can do with it

Read — Outlook Mail tells a bot things, nothing changes

Tool	What it does
`outlook-mail.search`	Search the mailbox.
`outlook-mail.get_message`	Read one message by id.
`outlook-mail.list_folders`	List mail folders with their item counts, at the top level or under a parent folder path.
`outlook-mail.list_drafts`	List the drafts in the Drafts folder, newest first, with their To, Cc and Bcc recipients.

Write — Outlook Mail lets a bot change things

Tool	What it does
`outlook-mail.apply_categories`	Set categories on a message.
`outlook-mail.reply`	Reply to a message in its thread.
`outlook-mail.send`	Send a new message.
`outlook-mail.create_draft`	Save a draft in the Drafts folder with To, Cc, Bcc and an HTML or text body. It is not sent.
`outlook-mail.reply_all`	Reply to the sender and every other recipient. `to` must list every one of them, comma-separated.
`outlook-mail.forward`	Forward a message with a comment to the recipients in `to`, comma-separated.
`outlook-mail.create_folder`	Create a mail folder, at the top level or under a parent folder path.
`outlook-mail.move_message`	Move a message into a folder named by its path (Clients/Larsen) or a well-known name (inbox, archive).
`outlook-mail.bulk_update`	Archive, move into a folder, flag, unflag, or mark read or unread up to 100 messages in one step.
`outlook-mail.bulk_delete`	Delete up to 100 messages in one step. They go to Deleted Items, where the member can restore them.
`outlook-mail.send_draft`	Send a draft from the Drafts folder as it stands. `to` must list every To, Cc and Bcc recipient of the draft, comma-separated.

A bulk call is one approval card for all the messages it names: the card lists every one of them, and its details say the action and the folder. A message the bulk call could not change is named in the bot's result, and the others are still changed. Deleted messages go to Deleted Items, where you can restore them; nothing is deleted permanently.

Sending a draft

A bot can send a draft from your Drafts folder — one it saved for you, or one you wrote in Outlook yourself and asked it to send. Before anything is sent you get an approval card naming every person the draft goes to, Bcc included, unless you have told Botseon to always allow it. The draft is sent as it is saved in Outlook, with one line added at its top saying an AI assistant sent it (and any short note the bot adds), and it then shows in Sent Items. If the draft's recipients have changed since the card was raised — say you added someone in Outlook — nothing is sent, the draft stays in Drafts, and the bot is told who differs.

The permissions it asks for, in plain words

Every call a bot makes through this connector is tagged with what kind of thing it is. Only the tags below ever apply here — a tag this connector's tools never carry is not listed, because it can never ask you for it.

read — Looks something up. Nothing changes, and nothing is sent anywhere. A bot never has to ask first for this.
write — Changes something inside the connected account — creates, edits or files something. Asks you first, unless you have told Botseon to always allow that exact action.
external_send — Sends something to someone outside Botseon — a message, a reply, an email, a post. Asks you first, unless always-allowed.
delete — Deletes something you would consider yours. Always asks first — there is no always-allow rule that ever covers this.

Limits

Mail across your Microsoft 365 account: search, read, draft, send and manage messages and folders. Nothing outside that list is possible through this connector, however a bot is asked to use it.

Outlook Mail is also only ever as wide as the scopes your organisation's connected app actually requests — the exact scopes are on the setup guide, because narrowing or widening them is a decision for whoever runs your deployment, not for this page.

Disconnecting

In Botseon

Open Plugins from the sidebar, press this connector's card to open its detail page, and under Accounts press the ✕ next to the account (its label is "Remove account" and the name of the account), then Revoke and remove to confirm — or Uninstall to remove the plugin and every account connected to it at once. Either one revokes the stored connection immediately: nothing more is read or changed through it from that moment on. Install a plugin walks through the same screen step by step.

At Microsoft

Removing the account in Botseon also asks Microsoft to revoke the token, when this deployment's connector is configured with a revoke URL. Confirm the grant is actually gone by opening Microsoft's own account settings — the connected-apps, security or authorised-apps page covers it — and removing Botseon there too if it still shows up. That is also where you can revoke access without going through Botseon at all, which is worth knowing if you ever lose access to your Botseon account.

What Botseon keeps, and how your data is used

Whatever a bot reads or writes through this connector becomes part of your conversations and the record of that run — the same records, and the same retention schedule, as everything else a bot works on. Botseon is the processor for that content; your organisation decides what it may read and remember, and can delete it sooner than the schedule would on its own.

Your data is sent to a model provider only to produce the bot's answer, and for nothing else — it is not used to train any model. The Privacy Policy's Models and How long we keep it sections have the full detail, including exactly how long each kind of record is kept for.