A private assistant link and mailbox-owner OAuth consent are required. Only enrolled access is permitted. Sending, when enabled, requires owner review. No mailbox deletion or modification.