I want to allow someone in my organisation to be able to add, view, edit all my events in my outlook calendar. I have given them delegate access to my calendar.
However, they are unable to add events with this level of permission.
Is there a higher access level to grant than delegate on outlook.
Here is a list of Outlook calendar permissions
Calendar permissions
How are you adding these permissions? Some calendar permissions need to be made in Powershell. I would be glad to help if you would like assistance with that.
Related
I work in a large e-commerce company. We run largely Windows machines with Exchange. I'd like to get a list of anyone in the company who has their calendar permissions set more openly than the defaults. For example: how do I see who in my company has "full details" of their calendar turned on?
I'm not an admin, just a regular user.
I know how to open and view others' calendars. For example, I know how to open Jane's calendar, or view Bob's calendar, some of whom are sharing more details than others.
Rather than open every person's calendar individually, is there a way to progrmatically view who has more open calendar permissions set to the "everyone" or "all users" group?
Reviewing this, but not clear. Not looking to do this for just my user and can run with elevated application rights with access to all calendars.
https://developer.microsoft.com/en-us/graph/docs/api-reference/v1.0/api/calendar_list_events
Yes you just need to make sure you give your application the following permission
Calendars.Read.Shared Read user and shared calendars Allows the app to read events in all calendars that the user can access, including delegate and shared calendars.
ref https://developer.microsoft.com/en-us/graph/docs/concepts/permissions_reference
So as long as the calling account then has access to the Room Mailbox (eg via Delegation so they can access the same thing in Outlook etc) you just use the following endpoint
https://graph.microsoft.com/v1.0/users('room#domain.com')/calendar/events
I am running into an issue with Microsoft Flow to create appointments on another calendar that my account as Send As permission to. I am able to create appointments in the UI for this second account. However in Flow, it is asking for a CalendarID. The drop down only shows calendars directly related to the account in the connection. When I manually enter the CalendarID to the second account, I receive this error: "The specified object was not found in the store."
Any help / tutorials will be greatly appreciated.
"The specified object was not found in the store."
This is an EWS permissions error so whatever you doing isn't going to work with SendAS rights. You will need to assign full access permission to the Mailbox (or at least rights to the calendar folder via Add-MailboxFolderPermission) for this to work with EWS. SendAs permission by definition only gives a user rights to SendAS another user not access folders in their Mailbox. You can test all this with the EWSEditor https://ewseditor.codeplex.com/ which is going to be making the same calls. If it works in the EWSEditor with the same creds as flow but not in your other code then you know the rights are good but whatever you doing in Flow is the issue.
I have a service account that I want to be able to access another users calendar through the ews api in such a way that it can create appointments, update appointments they have created and delete appointments they have created but NOT be able to read all items on the users calendar.
This appears to be possible in office 365 (see screenshot) but is it possible with Exchange 2010? If so how?
Sure the image you have posted is just the Folder permissions from Outlook these permission are the same from Exchange 2007 to Office365. The two ways you can set permission pro-grammatically like you have shown is first use one of the Mailbox Access API's like Mapi or EWS and set the Folder permission eg https://msdn.microsoft.com/en-us/library/office/dn641962(v=exchg.150).aspx
Or you can use the Exchange Management Shell and Add-MailboxFolderPermissions https://blogs.technet.microsoft.com/ilvancri/2009/11/24/exchange-2010-and-then-there-is-the-long-awaited-cmdlet-add-mailboxfolderpermission/ this can be a better approach as it just requires delegated admin rights via an RBAC role where setting the folder permission via EWS because it uses a User API would require the account setting those permissions to be the Mailbox owner, have been delegate Full Access rights on the Mailbox (eg add-mailboxpermission) or use Impersonation.
I wanted to create an account in standalone application like in Outlook.
Have gone through MAPI interfaces Click here! but can't find anything useful.
Also looked for the Account Manager Api Click here!
But here you can only view already added accounts. If you want to create account using Account Manager Api , it will prompt a dialog box for adding an account. Which is of no use for me because I want a code for the same.
Please let me know if there is any solution.
The parts of the IOlkAccount interface related to creating new accounts are not documented. You can use MAPI to add Exchange and PST accounts.
If using Redemption is an option (I am its author), it allows to add POP3/SMTP accounts using RDOAccounts.AddPOP3Account.