How to Configure Office 365 Calendar Permissions

How to configure calendar permissions with powershell or active directory users and computers

This article will show you how to configure Office 365 calendar permissions using three different approaches:

  • Using EasyEntra
  • Using PowerShell
  • Using Outlook

Configure Microsoft 365 Calendar Permissions Using EasyEntra

By far, the easiest way to configure Microsoft 365 calendar permissions is using EasyEntra.

EasyEntra is a stand-alone application that you can install on Windows 10, Windows Server 2019, or later.

With EasyEntra, you can even configure the SharingPermissionFlags attribute of calendar permissions:

To view or configure calendar permissions, you open up user properties, select the Mailbox tab and click the Calendar Delegation button.

This opens up the Calendar Permissions form, where you can view, add, remove or reconfigure permissions on the user calendar.

You can set the permission level to any of the following available roles:

Mailbox Folder Roles

Role NamePermissions Included in Role
AuthorCreateItems, DeleteOwnedItems, EditOwnedItems, FolderVisible, ReadItems
ContributorCreateItems, FolderVisible
EditorCreateItems, DeleteAllItems, DeleteOwnedItems, EditAllItems, EditOwnedItems, FolderVisible, ReadItems
NoneFolderVisible
NonEditingAuthorCreateItems, FolderVisible, ReadItems
OwnerCreateItems, CreateSubfolders, DeleteAllItems, DeleteOwnedItems, EditAllItems, EditOwnedItems, FolderContact, FolderOwner, FolderVisible, ReadItems
PublishingEditorCreateItems, CreateSubfolders, DeleteAllItems, DeleteOwnedItems, EditAllItems, EditOwnedItems, FolderVisible, ReadItems
PublishingAuthorCreateItems, CreateSubfolders, DeleteOwnedItems, EditOwnedItems, FolderVisible, ReadItems
ReviewerFolderVisible, ReadItems
AvailabilityOnly(Calendar only) View only availability data
LimitedDetails(Calendar only) View availability data with subject and location

Using EasyEntra makes your Microsoft 365 license and mailbox management an integrated part of daily AD management.

With EasyEntra, you no longer need to switch to PowerShell or the many diverse web consoles such as Microsoft 365 Admin Center, Exchange Admin Center, or the Azure Portal. Instead, you can manage everything from EasyEntra, which is very intuitive and responsive.

Review the extensive documentation to see if EasyEntra fits your needs.

EasyEntra is available as a free 30-day trial and only takes a minute to install and configure.

EasyEntra is free to use for any tenant with less than 25 licensed users.

Download EasyEntra now and start saving time in just a few minutes.

Configure Office 365 Calendar Permissions Using PowerShell

Without EasyEntra, you’re left with PowerShell. Unfortunately, Microsoft does not offer a graphical user interface to manage calendar permissions.

To complicate things further, you need to use two different PowerShell commands, depending on whether you’re assigning new permissions or modifying existing permissions(!).

But first, to view permissions, use the Get-MailboxFolderPermission command, e.g.:

Get-MailboxFolderPermission tycho.brahe@azure.skrubbeltrang.com:\Calendar

(note that the calendar path must match the localized name of the Calendar)

The output might look similar to the following:

PS C:\> Get-MailboxFolderPermission tycho.brahe@azure.skrubbeltrang.com:\Calendar

FolderName User      AccessRights     SharingPermissionFlags
---------- ----      ------------     ----------------------
Calendar   Default   {LimitedDetails}
Calendar   Anonymous {None}
Calendar   Sales     {Contributor}

To add a new principal to the access list, use the Add-MailboxFolderPermission command:

Add-MailboxFolderPermission tycho.brahe@azure.skrubbeltrang.com:\Calendar -User hans.ussing@azure.skrubbeltrang.com -AccessRights Contributor

To edit the permissions of a principal already in the access list, use the Set-MailboxFolderPermission command:

Set-MailboxFolderPermission tycho.brahe@azure.skrubbeltrang.com:\Calendar -User sales@azure.skrubbeltrang.com -AccessRights LimitedDetails

To remove the permissions of a principal in the access list, use the Remove-MailboxFolderPermission command:

Remove-MailboxFolderPermission tycho.brahe@azure.skrubbeltrang.com:\Calendar -User hans.ussing@azure.skrubbeltrang.com

The access of Tycho Brahe’s calendar now looks like this:

PS C:\skrubbeltrang\Consulting\Customers\Agema\NEP\PowerShell> Get-MailboxFolderPermission tycho.brahe@azure.skrubbeltrang.com:\Calendar

FolderName User        AccessRights     SharingPermissionFlags
---------- ----        ------------     ----------------------
Calendar   Default     {LimitedDetails}
Calendar   Anonymous   {None}
Calendar   Sales       {LimitedDetails}

As seen in the above examples, you need to take care if you’re modifying or adding calendar permissions.

If you accidentally try to add permissions for an existing security principal, you’ll get the following error:

An existing permission entry was found for user: Sales.
    + CategoryInfo          : NotSpecified: (:) [Add-MailboxFolderPermission], UserAlreadyExis...nEntryException
    + FullyQualifiedErrorId : [Server=DB6P189MB0390,RequestId=695957e5-c362-4aab-bd58-af6ab7802dc5,
      TimeStamp=9/26/2021 6:10:19 PM] [FailureCategory=Cmdlet-UserAlreadyExistsInPermissionEntryException]
      F7E2EB7E,Microsoft.Exchange.Management.StoreTasks.AddMailboxFolderPermission
    + PSComputerName        : outlook.office365.com

On the other hand, if you try to set permissions for a security principal with no existing permissions, you’ll see this error:

There is no existing permission entry found for user: Hans Ussing.
    + CategoryInfo          : NotSpecified: (:) [Set-MailboxFolderPermission], UserNotFoundInPermissionEntryException
    + FullyQualifiedErrorId : [Server=DB6P189MB0390,RequestId=80ec4190-4980-47ed-9680-88a63a34075f,
      TimeStamp=9/26/2021 6:18:04 PM] [FailureCategory=Cmdlet-UserNotFoundInPermissionEntryException]
      F75A5C7D,Microsoft.Exchange.Management.StoreTasks.SetMailboxFolderPermission
    + PSComputerName        : outlook.office365.com

Configure Office 365 Calendar Permissions Using Outlook

You can also configure calendar access using Outlook but only for your own (or a delegated) mailbox.

Right-click the calendar icon in the bottom right corner and select “options” to edit the calendar access.

This will open up the calendar permissions:

Calendar options in Outlook

You then get access to configure permissions on the calendar:

Calendar permissions and roles in Outlook

Summary

Configuring calendar permissions can be done with EasyEntra, PowerShell, or Outlook.

Bulk changes can be made with PowerShell and EasyEntra, as EasyEntra allows multiple recipients to be selected and configured simultaneously.

For day-to-day management, EasyEntra is the most convenient tool, as you don’t have to start a PowerShell console and choose between different commands based on the type of permissions you’re assigning.

Download your 30-day trial of EasyEntra here, and get started in just a few minutes.

For an in-dept walk-through of EasyEntra watch this webinar (available with English subtitles):