Set an access role's reach into a mailbox
set_access_role_mailbox_accessHow far an access role's agents may reach into one mailbox: the access level (write = everything its capabilities allow, read = search and read only, none = hidden), which folders its file tools may use (all / only these / all except these, by folder path), and which calendars (all / only these / all except these, by calendar name). Give only the parts you want to change; the others stay as they are. list_access_roles shows the current standing. This only stages a request: the owner opens the link in their browser, reviews it, and approves it there with their agent PIN. Never ask for or accept the PIN in chat.
Input Schema
TableJSON Schema
| Name | Required | Description | Default |
|---|---|---|---|
| role | Yes | The access role's name. | |
| level | No | Access level: write, read, or none (hidden). | |
| folders | No | Folder paths for an only/except folder rule, e.g. ["Clients/Acme", "Shared"]. | |
| mailbox | Yes | The connected mailbox's address. | |
| provider | No | Only needed when the same address is connected under more than one provider. | |
| calendars | No | Calendar names (or ids) for an only/except calendar rule. | |
| workspace | No | Which workspace, by name or id. Only needed when you own more than one — list_workspaces shows them. | |
| folderMode | No | Folder rule for file tools: all, only, or except. | |
| calendarMode | No | Calendar rule: all, only, or except. |