xAI's Grok can now act inside Microsoft 365 the way most people assumed ChatGPT would — search mail, draft replies, move messages, and send on your behalf. The detail that matters for builders and IT: Outlook permissions are full read-write-send from the first OAuth click, while Grok's Gmail connector starts read-only.
Late-August 2026 news — Grok 4.6 on Microsoft Foundry (August 26) and a OneDrive plugin (August 27) — put the connector story back on the timeline. But the Outlook read/write capability itself has been documented since May 2026, with a dedicated Outlook add-in shipping July 21, 2026.
TL;DR — what people are asking
| Question | Answer |
|---|---|
| Read + write + send? | Yes — Mail.ReadWrite + Mail.Send at OAuth sign-in |
| Calendar too? | Yes — Calendars.ReadWrite on separate Outlook Calendar connector |
| Where to connect? | grok.com/connectors → New Connector → Outlook |
| In-app sidebar? | Grok for Outlook add-in (July 21, 2026) — paid X/SuperGrok only |
| Free M365 add-ins? | Word, Excel, PowerPoint add-ins are free; Outlook is the exception |
| Gmail difference? | Gmail starts read-only; Outlook starts with send |
| Enterprise gate? | Work/school accounts may need Azure AD admin pre-approval |
| Latest model on Azure? | Grok 4.6 on Microsoft Foundry from August 26, 2026 |
Two surfaces: connector vs. add-in
Grok meets Outlook two ways:
1. Outlook Mail & Calendar connectors (all Grok users)
Documented on xAI's connector pages, split into two OAuth flows:
Outlook Mail
- Search and read messages (body, headers, attachments)
- Compose, manage drafts, reply-all, forward
- Send mail via
Mail.Send - Move messages, create folders, batch operations
- Upload Grok-generated artifacts as draft attachments
Outlook Calendar
- Read availability, create/update/delete events
- RSVP and manage recurrence
Required scopes at sign-in:
| Scope | Purpose |
|---|---|
Mail.ReadWrite | Read, create, update, delete mail and drafts |
Mail.Send | Send on behalf of the signed-in user |
Calendars.ReadWrite | Full calendar read/write |
User.Read | Basic profile |
offline_access | Persistent connection without re-prompting |
Permissions are delegated — Grok accesses only the signed-in user's mailbox and calendar.
2. Grok for Outlook add-in (paid subscribers)
Shipped July 21, 2026 as a Microsoft commercial marketplace add-in. Sits in Outlook's task pane for thread summaries, backlog sweeps, and draft composition without leaving the inbox. Requires paid X Premium or SuperGrok — unlike xAI's free Word, Excel, and PowerPoint add-ins.
The Gmail vs. Outlook permission asymmetry
If you tested Grok on a Google account and concluded it couldn't act on mail, you tested the conservative half.
| Connector | Default at sign-in | Send capability |
|---|---|---|
| Gmail | Read-only base scope | Write/send only when tool groups enabled |
| Outlook Mail | Mail.ReadWrite + Mail.Send | Immediate — first Accept click |
For agent harness designers, that asymmetry changes your threat model: connecting a Microsoft work account to Grok is closer to handing an agent your outbox keys than connecting Gmail on defaults.
August 2026 Microsoft stack updates
| Date | What shipped |
|---|---|
| May 2026 | Outlook Mail, Calendar, Teams connectors documented |
| Jul 21, 2026 | Grok for Outlook paid add-in |
| Aug 26, 2026 | Grok 4.6 on Microsoft Foundry |
| Aug 27, 2026 | OneDrive plugin live |
xAI's broader connector catalog also includes Google Drive, Salesforce, SharePoint/OneDrive (Business/Enterprise), and bring-your-own MCP — part of the same MCP-era connector wave explainx.ai tracks across Grok 4.6 launch coverage and Perplexity's hybrid local-PII desktop client.
IT checklist before you connect a work account
- Check Azure AD app consent policies — does your tenant require admin approval for xAI Grok?
- Review delegated scopes —
Mail.Sendmeans Grok can send as the user, not just draft - Document revocation path — grok.com/connectors and Microsoft account app-permissions page
- Separate add-in vs. connector — sidebar add-in is paid; web connector path is broader
- Compare to Copilot — Microsoft Copilot agents run inside the M365 trust boundary; Grok is a third-party OAuth app
Related on explainx.ai
- Grok 4.6 launch and Cursor evals
- What is MCP?
- What is an agent harness?
- Perplexity Mac hybrid compute for local PII
- Microsoft Copilot agents LLM call share
- Starshield Grok government GenAI
Official source: xAI Outlook connector documentation.
Connector scopes, add-in pricing, and Foundry availability are accurate as of September 1, 2026.