Last updated: October 07, 2026, 3:20 PM IST
Google is quietly testing a setting that would change how much power Gemini has on your computer. It is called the Full Access permission, and if it rolls out the way the early signs suggest, Gemini will be able to wander far beyond a single folder you picked for it. Think your whole Mac, your other apps, and the open web, all within one long task.
The setting is not official yet. Google has not announced it, put it in a blog post, or given any release date. What we have instead is a hidden option inside the Gemini desktop app that testers stumbled on this week, and it tells a pretty clear story about where desktop AI assistants are heading. So let us break down what this permission actually is, what Gemini could do with it, and the honest answer to the only question that matters: should you ever turn it on?
What Is the Gemini Full Access Permission?
Right now, when Gemini works with files on a Mac, it stays inside the folders you hand it. You point it at your Downloads or a project folder, and it works in that little sandbox. The new hidden option, labelled "Additional sandbox options" in the app, is designed to remove those walls.
According to the hidden interface text, enabling it lets you "expand what Gemini can do and access on your Mac." A second line is the important one: "Depending on which settings you enable, Gemini may be permitted to take actions without asking for your permission first." Read that again, because that one sentence is the whole feature.
In plain words, the Full Access permission would let Gemini read, create, change, and even delete files anywhere on your machine, not just in folders you connected. It also points to Gemini talking directly with native apps like Mail, Safari, and Messages, so it could draft and send things through the apps you already use instead of just chatting about them. Early reports on the find come from TestingCatalog, which spotted the hidden setting, and the coverage since then has filled in the shape of Google's plan.
What Could Gemini Actually Do With Full Access?
Picture giving Gemini a job like "clean up my desktop, file the invoices, and email the totals to my accountant." Today that stalls out fast, because every new folder or app is another permission wall. With Full Access switched on, the same job could run as one chain: open the files, rename and sort them, pull numbers into a sheet, then open Mail and send the result. No tapping "allow" at every step.
That is the upside, and it is a real one. Multi-step work is exactly what people have been promised from AI agents for two years now. It is also why Google is building this on top of its computer use work. If you want the background on how we got here, our explainer on Gemini AI and what it can already do is a good place to start.
Google is not removing every guardrail, though. Based on what testers found, Gemini would still stop and ask before:
- Buying anything or moving money
- Creating an online account in your name
- Accepting legal terms or agreements for you
- Changing sensitive personal information
So the picture is not "Gemini does whatever it wants." It is "Gemini handles the routine steps quietly and still knocks on the door for the decisions that cost money or carry legal weight." Whether that balance feels right is a personal call, and it is exactly the call this setting asks you to make.
How This Differs From Gemini on Your Mac Today
If you already use Gemini Spark on a Mac, you know the current deal. It can sort files, turn invoices into a budget sheet, and keep an eye on topics for you, but only inside the directories you granted. Every new corner of your computer needs fresh consent. That friction is annoying, and it is also the safety model.
Full Access flips that model. Instead of granting access folder by folder, you would grant it once, broadly, and trust the agent to work inside that trust. It is the same trade every powerful automation tool eventually offers: less friction, more responsibility sitting on the software. Google even seems to be preparing stronger models for this kind of work, with its newest flagship being tested on desktop agent benchmarks. Nothing is confirmed there, so treat that as direction, not fact.
Why Apple Is Pushing Back at the Same Moment
Here is the part that makes this story bigger than one hidden setting. While Google tests broader access, Apple is tightening the screws in the opposite direction. Apple has announced it will require very explicit user action before apps can get Full Disk Access on macOS, and it pointed directly at AI agents as the reason. When an agent can read your filesystem, messages, and browsing history, one careless grant stops being a small thing.
That push and pull is the real story of desktop AI right now. The assistant makers want deep access because deep access is what makes agents genuinely useful. The platform owners hold the keys to that access, and Apple in particular seems in no mood to hand them over quietly. BleepingComputer's report on the Full Access find flags the same tension, noting that how this plays out depends heavily on what Apple allows.
Should You Turn On Gemini Full Access?
My honest take: most people should leave it off at first, and power users should treat it like handing a spare house key to a very capable, very literal helper. Here is a simple way to decide.
Turn it on only if most of these are true for you:
- You already trust Gemini with connected folders and it has earned that trust
- You run long, boring, multi-app tasks often enough that step-by-step approvals waste real time
- Your Mac has current backups, so a wrong move is recoverable
- You would still review anything involving money, email sends, or file deletion
Leave it off if your machine holds client files, financial records, or anything you could not afford to see deleted or shared. And whenever it does roll out, start small: enable it, watch a few tasks closely, and check whether Gemini's judgment matches yours before you let it run unattended. Features like this pair well with habits like the ones in our guide to creating a Gemini Skill step by step, where you define exactly what the assistant should do instead of improvising.
When Will You See It?
Not today, most likely. The setting is hidden, tied to trusted testing, and Google has not said a word publicly. Features like this often sit in testing for months, change shape, or quietly disappear. If it ships, expect it first on Mac, where Gemini's desktop agent is furthest along, and expect Apple to have a say in how much of it survives contact with macOS permissions.
Until then, the find still matters. It confirms the direction: chatbots are becoming operators, and the permission screen is becoming the most important screen in AI. The next time an assistant asks for broad access to your computer, it is worth pausing on that screen a second longer than feels natural. What you are granting there is the whole story.
Frequently Asked Questions
What is the Gemini Full Access permission?
It is a hidden setting found inside the Gemini desktop app, labelled "Additional sandbox options." If released, it would let Gemini work outside the folders you selected, reach other apps, and take some actions without asking for approval at every step.
Can Gemini delete my files with Full Access turned on?
Based on what testers found, yes, file deletion across your Mac would fall within the permission. That is the main risk of the feature, and it is why keeping backups matters before enabling anything like it.
What will Gemini still ask about before doing?
Sensitive actions stay behind a confirmation. That includes purchases, money transfers, creating online accounts, accepting legal terms, and changing sensitive personal information.
Is Gemini Full Access available now?
No. Google has not announced it, and the option is hidden in the app while it is tested with a limited group. There is no confirmed release date, and the final version may look different from what was spotted.
Why is Apple making Full Disk Access harder to grant?
Apple says AI agents are the reason. An agent with full disk access can read files, messages, and browsing history, so Apple wants users to take a very deliberate action before granting it, instead of approving it casually during setup.
Sources
- Google Gemini could soon get full access to Mac files, apps and the web (BleepingComputer)
- Google Gemini computer access explained (Cyber Security News)
My Personal Take
This permission is the Rubicon for AI on your computer. Everything genuinely useful about agents — and everything genuinely scary — lives on the other side of it. My position is simple: most people should leave it off until there's a specific task that truly needs it, and even then, scope it as tightly as possible. Convenience will tempt everyone to flip the switch; resist the urge until the benefit is concrete and the risk is understood.
Here's the part people miss: the risk isn't Google being evil with your data. It's a prompt-injection attack — a malicious webpage or document — riding on permissions you granted for innocent reasons. Treat Full Access like root access, because functionally, it is. Start with the narrowest permissions that get your task done. You can always widen them later; you can't unwiden a breach.
0 Comments