What are you trying to do?
Decide yourself on every message the assistant wants to send: see it in full, then approve or reject it.
Steps
-
The assistant requests a send. It creates a fixed request: from · to · cc · bcc · subject · text · attachments · and every warning. Nothing leaves before you approve.
-
Open “Approvals”. The request is under “Waiting for your approval”. Read it in full, warnings included — such as an address that imitates a known domain, a reply to a suspicious message, or hidden recipients.
-
Approve or reject. On approval, exactly the text you saw is sent — protected by a snapshot hash that prevents any change between approval and sending — and its copy is saved in “Sent” at your provider.
-
Or approve with a code. If you set up an authenticator app in “Security”, you can type its six-digit code in your chat with the assistant for it to pass on. Each code works once.
-
A scheduled message: if the assistant asks to send it later, your approval schedules it and never sends it early; it leaves at its time.
What can go wrong
The request expired before you saw it. Each request has a time limit set by your plan (a quarter of an hour on the free plan, for example). An expired request is never sent; ask the assistant for a new one.
You wanted a small change in the text. A request cannot be edited once created: reject it and ask the assistant for a new request with the change. This is deliberate — what you approve is exactly what is sent.
You get no notification of the request. Notifications need to be turned on for your device in “Security”. If you see “Notifications are not available at the moment”, follow requests on the “Approvals” page, which refreshes by itself.
Something you won’t expect
Three things are sent without approving a request at that moment — and all three come from you: a message you write and send yourself in the app, a scheduled message you approved, and the out-of-office reply once the mailbox manager turns it on with its text and dates. The assistant can only request.
Nobody approves on anyone else’s behalf: only the request’s owner approves — not even the workspace owner.