This browser is no longer supported.
Upgrade to Microsoft Edge to take advantage of the latest features, security updates, and technical support.
![](data:image/svg+xml, %3Csvg xmlns='http://www.w3.org/2000/svg' height='64' class='font-weight-bold' style='font: 600 30.11764705882353px "SegoeUI", Arial' width='64'%3E%3Ccircle fill='hsl(208, 41%, 30%)' cx='32' cy='32' r='32' /%3E%3Ctext x='50%25' y='55%25' dominant-baseline='middle' text-anchor='middle' fill='%23FFF' %3EJ%3C/text%3E%3C/svg%3E)
I am new to the MS Graph API, and I am trying to understand the calendar permissions better.
I am reading https://learn.microsoft.com/en-us/graph/permissions-reference#calendars-permissions
and https://learn.microsoft.com/en-us/graph/api/resources/calendar?view=graph-rest-1.0
What I am not seeing clearly, if an application can create a calendar and have read/write access only to that specific calendar. Without requesting *Calendars.ReadWrite* for all calendar, the user might have.
Hi @Jakob
Application permissions are global, it can read and write to all user calendars in the organization and cannot be restricted to specific calendars only. So application permissions don't apply to your context.
Hope this helps.
If the reply is helpful, please click Accept Answer and kindly upvote it. If you have additional questions about this answer, please click Comment.
Hello Jakob,
Thanks for posting your question in this Q&A Forum.
In-order for an application to create a calendar for a user, you need to assign the application "Calendars.ReadWrite" permission. If you are signed in with a user to the in the Graph Explorer and app will get access the calendar on behalf of that user and you need to provide "Calendars.ReadWrite" permission to the app in-order to get data from the user calendar.
For apps that access resources and APIs without a signed-in user, the application permissions need be consented to by an administrator when the app is installed in the tenant or in the Azure portal.
Here is the details KP article of different types of permission;- https://learn.microsoft.com/en-us/graph/permissions-overview?tabs=http#permission-types
Hope that answers your question.
Unfortunately, this has not made it clearer to me. In my scenario, I think "Application permissions" applies, as I'm offering users of the app a specialized calendar. My goal is to request as little access as needed, and when I request "Calendars.ReadWrite" to create a new calendar and add events to that new calendar, I would rather not be able to read the personal and other calendars a user might have already.