ActorDo works with both free and paid Google licenses.
Actor uses OAuth delegated access for Google accounts.
This means:
- Every action is performed on behalf of the authenticated user.
- Actor can only access the Gmail, Calendar, and Tasks data that the user already has permission to access.
- Actor does not request Google Workspace domain-wide delegation or administrator-level access.
- Google Workspace administrators may choose to pre-authorize Actor for their organization, but Actor still operates only within the permissions granted to each signed-in user.
This delegated permission model follows Google’s principle of least privilege while enabling Actor to provide AI-powered email, calendar, and task management.
Permission Scopes requested
| Permission | Why Actor needs it |
|---|---|
https://www.googleapis.com/auth/calendar.readonly | Allows Actor to read the user’s calendar to understand availability, upcoming meetings, and scheduling context. This enables meeting planning, agenda generation, and availability-aware automations without modifying existing calendar events. |
https://www.googleapis.com/auth/calendar.events | Allows Actor to create, update, and delete calendar events on behalf of the user. This is used for scheduling meetings, rescheduling appointments, creating reminders, and managing calendar events through AI or user-configured automations. |
https://www.googleapis.com/auth/tasks | Allows Actor to read and manage Google Tasks. Actor can create tasks from emails, update task status, synchronize action items, and organize personal task lists. |
https://www.googleapis.com/auth/gmail.modify | Allows Actor to read emails and modify mailbox state without permanently deleting messages. This includes applying labels, archiving, marking emails as read or unread, moving messages, and organizing the inbox. This permission powers AI email management, inbox organization, summarization, and automation workflows. |
https://www.googleapis.com/auth/gmail.compose | Allows Actor to create email drafts and send emails that the user explicitly requests or that are sent through user-approved automations. Actor does not send emails without user authorization or configured workflows. |
https://www.googleapis.com/auth/gmail.labels | Allows Actor to create, update, and manage Gmail labels used for organizing emails. Labels created by Actor help categorize messages, track follow-ups, and support automation workflows. |
https://www.googleapis.com/auth/userinfo.profile | Allows Actor to access basic profile information, such as the user’s name and profile picture. This is used to personalize the experience and identify the authenticated Google account. |
