How to Configure Office 365 Calendar Permissions

How to configure calendar permissions with powershell or active directory users and computers

This article will show you how to configure Office 365 calendar permissions using three different approaches:

  • Using Active Directory Users & Computers (with Easy365Manager)
  • Using PowerShell
  • Using Outlook

Configure Office 365 Calendar Permissions Using Easy365Manager

By far, the easiest way to configure Office 365 calendar permissions is using Easy365Manager.

Easy365Manager is a plugin for Active Directory Users & Computers that adds two new tabs to user properties and one new tab to group properties.

Starting with version 1.2.6, Easy365Manager now includes management of calendar permissions:

Delegate Office 365 calendar permissions using Easy365Manager

To view or configure calendar permissions, you open up user properties, select the Mailbox tab and click the Calendar Permissions button.

This opens up the Calendar Permissions form, where you can view, add, remove or reconfigure permissions on the user calendar.

You can set the permission level to any of the following available roles:

Mailbox Folder Roles

Role NamePermissions Included in Role
AuthorCreateItems, DeleteOwnedItems, EditOwnedItems, FolderVisible, ReadItems
ContributorCreateItems, FolderVisible
EditorCreateItems, DeleteAllItems, DeleteOwnedItems, EditAllItems, EditOwnedItems, FolderVisible, ReadItems
NoneFolderVisible
NonEditingAuthorCreateItems, FolderVisible, ReadItems
OwnerCreateItems, CreateSubfolders, DeleteAllItems, DeleteOwnedItems, EditAllItems, EditOwnedItems, FolderContact, FolderOwner, FolderVisible, ReadItems
PublishingEditorCreateItems, CreateSubfolders, DeleteAllItems, DeleteOwnedItems, EditAllItems, EditOwnedItems, FolderVisible, ReadItems
PublishingAuthorCreateItems, CreateSubfolders, DeleteOwnedItems, EditOwnedItems, FolderVisible, ReadItems
ReviewerFolderVisible, ReadItems
AvailabilityOnly(Calendar only) View only availability data
LimitedDetails(Calendar only) View availability data with subject and location

Using Easy365Manager makes your Office 365 license and mailbox management an integrated part of daily AD management.

With Easy365Manager, you no longer need to switch to PowerShell or the many diverse web consoles such as Microsoft 365 Admin Center, Exchange Admin Center, or the Azure Portal. Instead, you can manage everything inside Active Directory Users & Computers.

Review the complete feature list to see if Easy365Manager covers your needs.

Easy365Manager is available as a free 30-day trial. Download Easy365Manager now and start saving time in just a few minutes.

Configure Office 365 Calendar Permissions Using PowerShell

Without Easy365Manager, you’re left with PowerShell. Unfortunately, Microsoft does not offer a graphical user interface to manage calendar permissions.

To complicate things further, you need to use two different PowerShell commands, depending on whether you’re assigning new permissions or modifying existing permissions(!).

But first, to view permissions, use the Get-MailboxFolderPermission command, e.g.:

Get-MailboxFolderPermission tycho.brahe@azure.skrubbeltrang.com:\Calendar

(note that the calendar path must match the localized name of the Calendar)

The output might look similar to the following:

PS C:\> Get-MailboxFolderPermission tycho.brahe@azure.skrubbeltrang.com:\Calendar

FolderName User      AccessRights     SharingPermissionFlags
---------- ----      ------------     ----------------------
Calendar   Default   {LimitedDetails}
Calendar   Anonymous {None}
Calendar   Sales     {Contributor}

To add a new principal to the access list, use the Add-MailboxFolderPermission command:

Add-MailboxFolderPermission tycho.brahe@azure.skrubbeltrang.com:\Calendar -User hans.ussing@azure.skrubbeltrang.com -AccessRights Contributor

To edit the permissions of a principal already in the access list, use the Set-MailboxFolderPermission command:

Set-MailboxFolderPermission tycho.brahe@azure.skrubbeltrang.com:\Calendar -User sales@azure.skrubbeltrang.com -AccessRights LimitedDetails

To remove the permissions of a principal in the access list, use the Remove-MailboxFolderPermission command:

Remove-MailboxFolderPermission tycho.brahe@azure.skrubbeltrang.com:\Calendar -User hans.ussing@azure.skrubbeltrang.com

The access of Tycho Brahe’s calendar now looks like this:

PS C:\skrubbeltrang\Consulting\Customers\Agema\NEP\PowerShell> Get-MailboxFolderPermission tycho.brahe@azure.skrubbeltrang.com:\Calendar

FolderName User        AccessRights     SharingPermissionFlags
---------- ----        ------------     ----------------------
Calendar   Default     {LimitedDetails}
Calendar   Anonymous   {None}
Calendar   Sales       {LimitedDetails}

As seen in the above examples, you need to take care if you’re modifying or adding calendar permissions.

If you accidentally try to add permissions for an existing security principal, you’ll get the following error:

An existing permission entry was found for user: Sales.
    + CategoryInfo          : NotSpecified: (:) [Add-MailboxFolderPermission], UserAlreadyExis...nEntryException
    + FullyQualifiedErrorId : [Server=DB6P189MB0390,RequestId=695957e5-c362-4aab-bd58-af6ab7802dc5,
      TimeStamp=9/26/2021 6:10:19 PM] [FailureCategory=Cmdlet-UserAlreadyExistsInPermissionEntryException]
      F7E2EB7E,Microsoft.Exchange.Management.StoreTasks.AddMailboxFolderPermission
    + PSComputerName        : outlook.office365.com

On the other hand, if you try to set permissions for a security principal with no existing permissions, you’ll see this error:

There is no existing permission entry found for user: Hans Ussing.
    + CategoryInfo          : NotSpecified: (:) [Set-MailboxFolderPermission], UserNotFoundInPermissionEntryException
    + FullyQualifiedErrorId : [Server=DB6P189MB0390,RequestId=80ec4190-4980-47ed-9680-88a63a34075f,
      TimeStamp=9/26/2021 6:18:04 PM] [FailureCategory=Cmdlet-UserNotFoundInPermissionEntryException]
      F75A5C7D,Microsoft.Exchange.Management.StoreTasks.SetMailboxFolderPermission
    + PSComputerName        : outlook.office365.com

Configure Office 365 Calendar Permissions Using Outlook

You can also configure calendar access using Outlook but only for your own (or a delegated) mailbox.

Right-click the calendar icon in the bottom right corner and select “options” to edit the calendar access.

This will open up the calendar permissions:

Calendar options in Outlook

You then get access to configure permissions on the calendar:

Calendar permissions and roles in Outlook

Summary

Configuring calendar permissions can be done with Easy365Manager, PowerShell, or Outlook.

Bulk changes can be made with PowerShell and Easy365Manager, as Easy365Manager allows multiple recipients to be selected and configured simultaneously.

But for day-to-day management, Easy365Manager is the most convenient tool, as you don’t have to start a PowerShell console and choose between different commands based on the type of permissions you’re assigning.

Download your 30-day trial of Easy365Manager here, and get started in just a few minutes:

Did you like this post? Maybe your friends will too!