Understand folder and priority tool permissions
In Complexity, select your mailbox and enable the specific folder or priority tool. It also needs a current MailGen license and separate group grant. Catalog permission names alone do not create executable tools.
Tools implement folder creation/update and priority management. The current tool assembly also exposes ordering, rule editing, sorting-mode changes, and protected deletion proposals where authorized.
| Area | Read permission | Read prerequisites | Write permission | Write prerequisites |
|---|---|---|---|---|
| Folder definition | mail.read | No additional permission in this row | mail.folders.create, mail.folders.update, mail.folders.delete | mail.folders.manage |
| Folder order | mail.folders.order.read | mail.read | mail.folders.order.edit | mail.folders.order.read and mail.folders.manage |
| Folder sorting rule | mail.folders.sortRules.read | mail.rules.read | mail.folders.sortRules.edit | mail.folders.sortRules.read and mail.rules.manage |
| Folder sorting mode | mail.sorting.read | mail.read | mail.folders.sortingMode.toggle | mail.sorting.manage |
| Priority definition | mail.priorities.read | mail.read | mail.priorities.create, mail.priorities.update, mail.priorities.delete | mail.priorities.manage |
| Priority rank | mail.priorities.order.read | mail.priorities.read | mail.priorities.order.edit | mail.priorities.order.read and mail.priorities.manage |
| Priority assignment rule | mail.priorities.sortRules.read | mail.priorities.read | mail.priorities.sortRules.edit | mail.priorities.sortRules.read and mail.priorities.manage |
| Priority assignment state | mail.priorities.read | mail.read | mail.priorities.sortingMode.toggle | mail.priorities.manage |
These are separate required permissions, not automatic grants. Prerequisite chains also apply. For example, mail.priorities.manage requires mail.priorities.read. Read-only access does not require management authority.
Approval of deleteFolder or deletePriority requires the run to use an active, owned, verified Microsoft mailbox binding. See Microsoft Graph setup. This restriction applies to those deletion approvals, not to all folder or priority tools. Deletion requires separate user approval. Folder commands retain canonical mailbox ordering through Kafka. An accepted command does not prove a remote provider change.
Use folder detail reading for metadata. Use sorting run tools to execute sorting. Editing a rule and running sorting remain separate operations.