Calendar Permissions Calendars.ReadWrite for specific calendar only

Question

I am new to the MS Graph API, and I am trying to understand the calendar permissions better. I am reading https://learn.microsoft.com/en-us/graph/permissions-reference#calendars-permissions and https://learn.microsoft.com/en-us/graph/api/resources/calendar?view=graph-rest-1.0 What I am not seeing clearly, if an application can create a calendar and have read/write access only to that specific calendar. Without requesting *Calendars.ReadWrite* for all calendar, the user might have.

Answer 1

Hi @Jakob

Application permissions are global, it can read and write to all user calendars in the organization and cannot be restricted to specific calendars only. So application permissions don't apply to your context.

Hope this helps.

If the reply is helpful, please click Accept Answer and kindly upvote it. If you have additional questions about this answer, please click Comment.

Answer 2

Hello Jakob,
Thanks for posting your question in this Q&A Forum.
In-order for an application to create a calendar for a user, you need to assign the application "Calendars.ReadWrite" permission. If you are signed in with a user to the in the Graph Explorer and app will get access the calendar on behalf of that user and you need to provide "Calendars.ReadWrite" permission to the app in-order to get data from the user calendar.

For apps that access resources and APIs without a signed-in user, the application permissions need be consented to by an administrator when the app is installed in the tenant or in the Azure portal.
Here is the details KP article of different types of permission;- https://learn.microsoft.com/en-us/graph/permissions-overview?tabs=http#permission-types

Hope that answers your question.