Security Question · AI Automation Society

Security Question

I work for a small agency and have been gradually building automations for us and a little for our clients. My most recent build is going to be for an inbox-specific automation for merging documents for data processing. The problem I'm running into is that our IT professional (email admin) is wary of the security risk of allowing n8n OAuth credentials the access it requires because it's domain-wide.

I've tried to tell them that it's only going to use that access if we build something malicious. But they are wary about someone hacking into n8n and being able to send messages on behalf of, say, our controller. Which i get, but I don't believe that's a problem unless I were to build something to do this.

Has anyone else run into this with Outlook permissions, and is there a quick way i can tell them that it shouldn't be an issue, or if i can build something different to mitigate the risk?

Thanks!

4 comments