calendar access

Glenn Maxwell 11,476 Reputation points
2023-12-28T19:59:29.3233333+00:00

Hi All

i have an office365 dynamic unified group i.e from Azure AD it has dynamic membership rule. This group has 500 users. i want to limit the calendar access to view access to 450 users and only 50 users can edit the calendar. is it possible? if so please guide me with PowerShell syntax. is it possible that if any new user is added by membership rule the user should get only view access. if required i can provide edit access.

Microsoft Exchange Online
SharePoint
SharePoint
A group of Microsoft Products and technologies used for sharing and managing content, knowledge, and applications.
10,773 questions
Microsoft Exchange Online Management
Microsoft Exchange Online Management
Microsoft Exchange Online: A Microsoft email and calendaring hosted service.Management: The act or process of organizing, handling, directing or controlling something.
4,558 questions
Exchange Server Management
Exchange Server Management
Exchange Server: A family of Microsoft client/server messaging and collaboration software.Management: The act or process of organizing, handling, directing or controlling something.
7,653 questions
Microsoft Exchange Hybrid Management
Microsoft Exchange Hybrid Management
Microsoft Exchange: Microsoft messaging and collaboration software.Hybrid Management: Organizing, handling, directing or controlling hybrid deployments.
2,122 questions
0 comments No comments
{count} votes

Accepted answer
  1. Vasil Michev 107.3K Reputation points MVP
    2023-12-29T16:48:48.62+00:00

    That's not possible. Microsoft 365 Groups are built on the principle of "equal access", so while you can restrict the Calendar to be read-only for Members and only editable by Owners of the group, these restrictions will apply to any and all Members. You cannot have different permissions for different sets of members.

    If promoting the Members in question to Owner is an option, this might work. Just make sure to toggle the -CalendarMemberReadOnly flag:

    Set-UnifiedGroup groupname -CalendarMemberReadOnly:$true
    

2 additional answers

Sort by: Most helpful
  1. Azar 22,870 Reputation points MVP
    2023-12-28T21:10:24.59+00:00

    Hi Glenn Maxwell

    it is possible to achieve this using PowerShell and the Microsoft Graph API to manage the permissions of an Office 365 Group calendar. below is a code using PowerShell and the Microsoft Graph API.

    # Install the MSAL.PS module if you haven't already
    # Install-Module -Name MSAL.PS
    
    # Connect to Microsoft Graph
    Connect-MsalService -Scopes "Group.ReadWrite.All"
    
    # Replace with your Group ID and desired permission settings
    $groupId = "yourGroupId"
    $viewAccessUsers = "user1@contoso.com", "user2@contoso.com", ... # List of users with view access
    $editAccessUsers = "user3@contoso.com", "user4@contoso.com", ... # List of users with edit access
    
    # Set calendar permissions for users with view access
    foreach ($user in $viewAccessUsers) {
        Set-MgCalendarPermission -GroupId $groupId -UserId $user -AccessRights "Read" -Confirm:$false
    }
    
    # Set calendar permissions for users with edit access
    foreach ($user in $editAccessUsers) {
        Set-MgCalendarPermission -GroupId $groupId -UserId $user -AccessRights "Read, Write" -Confirm:$false
    }
    
    
    

    If this help's kindly accept the answer thanks much.

    0 comments No comments

  2. Jarvis Sun-MSFT 10,196 Reputation points Microsoft Vendor
    2024-01-04T02:36:45.26+00:00

    @Glenn Maxwell ,

    You are correct that Unified Group owners have editor access to the calendar by default. However, it is not possible to change the permissions of individual members of the group. Instead, you can remove the member from the group and add them back as an owner to grant them editor access to the calendar.

    Regarding your second question, the syntax you provided is correct to revert back Unified Group members calendar access from read-only to editor. Please note that this command will only work if the group is a Unified Group and not a Distribution Group.

    --please don't forget to upvote and Accept as answer if the reply is helpful--

    0 comments No comments

Your answer

Answers can be marked as Accepted Answers by the question author, which helps users to know the answer solved the author's problem.