Outlook Calendar Read/Write Permissions - Application or Delegate level?

Answered

Lauren Nathan

June 11, 2025 14:22

Victor Nogales Junior @... - Below is a follow-up question from Lockheed Martin:

for "Calendar.ReadWrite" is that application or delegated permission.  This would give the application access to all calendar data for every user in the corporation.  Worst case scenario could be rogue app commands to delete all calendars.  This could be advertent or inadvertent.

• 

  Victor Nogales Junior

  June 12, 2025 09:50

  Hi Lauren Nathan, working on it. I'll let you know as soon as I get the answer.
• 

  Victor Nogales Junior

  June 13, 2025 17:17

  Calendar.ReadWrite is an application-level permission. We require application permissions because this integration involves system-to-system syncing, without any signed-in user.

  We use this permission to read and write events from resource calendars.

  Customers can also implement RBAC (Role-Based Access Control) within their Exchange environment to restrict our app's access to only specific mailboxes or resource calendars, using user groups or policies.

Please sign in to leave a comment.