What a Gmail delegate can actually do.

A delegate can read, send and delete every message in your account. There is no read-only delegate, and no way to limit one to a label or sender. One switch: the whole mailbox, or nothing.

What they can do

  • Read every message, including mail archived years ago.
  • Send from your address. Google appends their address, so a careful reader can tell.
  • Delete messages.

What they can't do

  • Change your password or reach account settings.
  • Chat as you, or use Gemini, Smart Compose and Smart Reply.
  • Attach from Drive or Photos, or start a Meet call.

Every restriction protects the account. None limits how much mail they can open.

Read-only, or one label?

Neither is possible. Sending and deleting come with delegation, and Google documents no label or sender restriction. See read-only access and why filters don't restrict.

What people do instead

  • A second account. Forward what you'll share into it and delegate that one. Works today, and you maintain the rules.
  • A shared inbox tool. Built for a team working one mailbox, not for hiding most of it from whoever you invited.

Where allowemail fits

We scope Gmail for AI tools today. Scoped access for a person is planned, not built. If that is what you need now, use the second account. Early access list.

Sources: Google's delegation help page and Gmail API scopes. Checked September 2026.