What permissions does Monty request, exactly?

When you sign in yourself: read, send, and manage messages on the specific mailbox you connect — that's what lets Monty see incoming lead replies, place drafts or sends in the thread, and keep it organized. It does not request access to your contacts, files, or any other mailbox in your organization, and the mailbox connection never asks for calendar access (if you later enable meeting booking, that's a separate calendar-only consent you approve explicitly). You can see the exact scopes on the provider's consent screen before you accept, and revoke them at any time from your Google account security page. When your IT admin approves Monty for the whole team, the grant is broader on paper — it covers every user on the domain, because that is how Google's domain-wide delegation and Microsoft's application permissions work — plus read-only access to the user directory so your team can pick inboxes. Monty acts only for the inboxes your team ticks, records each grant so it can be checked daily, and the admin can remove it in one place at any time.