Google Tests Expanded Access Permissions for Gemini AI on macOS Devices

Google is testing a desktop control feature for Gemini that would grant the AI assistant broad permissions to access files, launch applications, and browse the web on macOS systems with minimal user intervention. The feature includes a hidden "Additional sandbox options" setting that would allow Gemini to read, create, modify, or delete files system-wide, though sensitive actions like financial transactions would still require explicit approval. The capability represents Google's effort to expand Gemini's functionality beyond chat-based interactions to enable cross-platform automation similar to competing AI agents.
Google is developing a capability that would fundamentally alter how its Gemini AI assistant operates on Mac computers. Rather than requiring users to approve each individual action, the expanded permissions system would enable the AI to independently manage files throughout the operating system and interact with native applications like Mail and Safari. This represents a shift toward autonomous computing agents that operate across multiple platforms simultaneously, a direction several major AI companies are pursuing competitively.
The implementation includes protective guardrails for high-stakes decisions. Financial transactions, account creation, and modifications to personal information would still demand explicit user authorization before proceeding. However, the exact boundaries between autonomous and restricted actions remain undefined as the feature remains in testing phases, with no confirmed rollout timeline announced.
This development could meaningfully affect user privacy and security practices on personal computers. If broadly deployed, granting AI systems expansive file access and application control might increase risks from unauthorized data exposure or malicious prompts, while potentially streamlining legitimate productivity tasks. The outcome may hinge on how robustly Google implements permission safeguards and how clearly users understand the tradeoffs between convenience and control. Apple's reported interest in restricting such access suggests potential platform-level policy conflicts ahead.