calendar access

Question

Hi All

i have an office365 dynamic unified group i.e from Azure AD it has dynamic membership rule. This group has 500 users. i want to limit the calendar access to view access to 450 users and only 50 users can edit the calendar. is it possible? if so please guide me with PowerShell syntax. is it possible that if any new user is added by membership rule the user should get only view access. if required i can provide edit access.

Answer 1

That's not possible. Microsoft 365 Groups are built on the principle of "equal access", so while you can restrict the Calendar to be read-only for Members and only editable by Owners of the group, these restrictions will apply to any and all Members. You cannot have different permissions for different sets of members.

If promoting the Members in question to Owner is an option, this might work. Just make sure to toggle the -CalendarMemberReadOnly flag:

Set-UnifiedGroup groupname -CalendarMemberReadOnly:$true

Answer 2

Hi Glenn Maxwell

it is possible to achieve this using PowerShell and the Microsoft Graph API to manage the permissions of an Office 365 Group calendar. below is a code using PowerShell and the Microsoft Graph API.

# Install the MSAL.PS module if you haven't already
# Install-Module -Name MSAL.PS

# Connect to Microsoft Graph
Connect-MsalService -Scopes "Group.ReadWrite.All"

# Replace with your Group ID and desired permission settings
$groupId = "yourGroupId"
$viewAccessUsers = "user1@contoso.com", "user2@contoso.com", ... # List of users with view access
$editAccessUsers = "user3@contoso.com", "user4@contoso.com", ... # List of users with edit access

# Set calendar permissions for users with view access
foreach ($user in $viewAccessUsers) {
    Set-MgCalendarPermission -GroupId $groupId -UserId $user -AccessRights "Read" -Confirm:$false
}

# Set calendar permissions for users with edit access
foreach ($user in $editAccessUsers) {
    Set-MgCalendarPermission -GroupId $groupId -UserId $user -AccessRights "Read, Write" -Confirm:$false
}

If this help's kindly accept the answer thanks much.

Answer 3

@Glenn Maxwell ,

You are correct that Unified Group owners have editor access to the calendar by default. However, it is not possible to change the permissions of individual members of the group. Instead, you can remove the member from the group and add them back as an owner to grant them editor access to the calendar.

Regarding your second question, the syntax you provided is correct to revert back Unified Group members calendar access from read-only to editor. Please note that this command will only work if the group is a Unified Group and not a Distribution Group.

--please don't forget to upvote and Accept as answer if the reply is helpful--