The SharingPermissionFlags attribute on Exchange Online calendar folder permissions controls the level of delegate access to the mailbox calendar.
There are two things to keep in mind when configuring SharingPermissionFlags:
- You can only set the SharingPermissionFlags attribute on the calendar folder.
- You can only set SharingPermissionFlags when the delegate access level is Editor.
The SharingPermissionFlags attribute has three possible settings:
- None (not configured).
- Delegate (delegate receives invites and responses).
- Delegate + CanViewPrivateItems (is also able to view private calendar items).
How to Configure SharingPermissionFlags
The easiest way to configure calendar delegation and set the SharingPermissionFlags is by using Easy365Manager:
Easy365Manager is a lightweight snap-in to Active Directory Users & Computers that integrates AD and Office 365 management.
Using Easy365Manager offers a lot of benefits:
- First, you don’t need to use PowerShell for daily management.
- You can manage AD and Office 365 users and mailboxes from one interface.
- AD Users & Computers is a familiar and user-friendly tool that requires no training.
- You can move a lot of work from third-level support to first-level support.
- Finally, you can remove your on-premises Exchange Server.
You can install Easy365Manager in less than a minute, and no changes are needed to your infrastructure.
Download your fully functional 30-day trial of Easy365Manager here.
Configuring SharingPermissionFlags With PowerShell
Configuring SharingPermissionFlags with PowerShell is not a trivial task. As a result, most helpdesks (not using Easy365Manager) consider this a third-level assignment.
To use PowerShell to set this, you must first know the calendar path to which you’re delegating access.
In most cases, it will be similar to this:
hans.c.orsted@azure.skrubbeltrang.com:\Calendar(you can also use the alias instead of the complete mail address)
However, if the mailbox is localized, the path may change to Kalender (German), Calendrier (French), etc.
(check this article to find the correct calendar path programmatically)
Another thing to keep in mind is that you need to choose between two different PowerShell commands to set this up:
- Add-MailboxFolderPermission (if you’re adding a new delegate)
- Set-MailboxFolderPermission (if you’re modifying an existing delegate)
To add a new delegate with Delegate and CanViewPrivateItems you can use the following script:
Add-MailboxFolderPermission lene.hau:\Calendar -User tycho.brahe -AccessRights Editor -SharingPermissionFlags Delegate,CanViewPrivateItemsTo modify the SharingPermissionFlags of an existing delegate to Delegate, use the following syntax:
Set-MailboxFolderPermission lene.hau:\Calendar -User tycho.brahe -AccessRights Editor -SharingPermissionFlags DelegateConfiguring SharingPermissionFlags With Outlook
Finally, users can configure this on their own using Outlook.
However, in many organizations, users may find this procedure tedious or confusing.
Start by clicking Info, Account Settings and select Delegate Access:
Then select the delegate, click Permissions and configure the desired settings:
