Remove old scopes

Question

I am working on a project that requires the User.Read delegated permission as part of the single sign on process and for one or two other things. The users can then choose if they also want to give the app access to thier calendar and if the do they consent to the Calendar.Read delegated permission. Is it possible to later remove the Calendar.Read scope for this specific user?

Answer 1

The user can remove it themselves within their mail client

or

https://learn.microsoft.com/en-us/graph/api/calendarpermission-delete?view=graph-rest-1.0&tabs=http

DELETE /users/{id}/calendar/calendarPermissions/{id}