Home

Calendar permissions on Office 365 groups?

Anders Lindgren
New Contributor

Calendar permissions on Office 365 groups?

Hi,

 

I'm currently evaluating switching to groups for a K12-school. But as I can't have students adding and removing bookings from the group calendar, I'm looking for a way to set read-only permissions. I've seen some reference to using the set-unifiedgroup cmdlet and changing CalendarMemberReadOnly, but I can't get it to work. calenderreadonly.PNG

 

 

 

 

 

And if I use get-unifiedgroup, the line is empty.

getunified.PNG

 

Am I missing something or is there another way?

 

28 Replies

Re: Calendar permissions on Office 365 groups?

Have you already tried -CalendarMemberReadOnly $true ?

Re: Calendar permissions on Office 365 groups?


Salvatore Biscari wrote:

Have you already tried -CalendarMemberReadOnly $true ?


Yes I have, it make no difference. According to the Set-UnifiedGroup technet-page it should be without $true, "To set read-only Calendar permissions, use the CalendarMemberReadOnly switch without a value."

Re: Calendar permissions on Office 365 groups?

I don't think I've ever seen this one actually working. @Christophe Fiessinger can you clear things up please?

Re: Calendar permissions on Office 365 groups?

Hi, we are investigating this internally, I will post an update as soon as we identify what's happening here.

Re: Calendar permissions on Office 365 groups?

Thanks Krish.

Re: Calendar permissions on Office 365 groups?

Anything new regarding this issue?

Re: Calendar permissions on Office 365 groups?

"CalendarMemberReadOnly" Functional description:
This functionality was built for education, where in a classroom students do not have the ability to move events or appointments that a teacher adds in the group. Any member can still create a meeting event and send to the group, however they cannot add an appointment in the group calendar or edit any existing meetings or appointments added by their teachers. Currently this feature works only in Outlook for Web (OWA) which is the prominent app that is used in education, especially by students.

 

To set this property, run this command - 
Set-UnifiedGroup <group_smtpaddress> -CalendarMemberReadOnly:<$true/$false>

To view whether this property is properly set, use this command -
Get-UnifiedGroup <group_smtpaddress> -IncludeAllProperties | fl *calendar*

 

Please let us know the use cases you would like to have this functionality for, and the clients you would like to have it, so it will help us prioritize future developments on this better. 

Re: Calendar permissions on Office 365 groups?


Krish Gali wrote:

"CalendarMemberReadOnly" Functional description:
This functionality was built for education, where in a classroom students do not have the ability to move events or appointments that a teacher adds in the group. Any member can still create a meeting event and send to the group, however they cannot add an appointment in the group calendar or edit any existing meetings or appointments added by their teachers. Currently this feature works only in Outlook for Web (OWA) which is the prominent app that is used in education, especially by students.

 

To set this property, run this command - 
Set-UnifiedGroup <group_smtpaddress> -CalendarMemberReadOnly:<$true/$false>

To view whether this property is properly set, use this command -
Get-UnifiedGroup <group_smtpaddress> -IncludeAllProperties | fl *calendar*

 

Please let us know the use cases you would like to have this functionality for, and the clients you would like to have it, so it will help us prioritize future developments on this better. 


The problem is that I can't get the commands to work. I might be doing something wrong, but all I'm doing is connecting to Exhange online (using https://technet.microsoft.com/en-us/library/jj984289(v=exchg.160).aspx as a guide). But neither of the above commands work for me.

o365.JPG

 

Re: Calendar permissions on Office 365 groups?

The same thing happens on my side: there are no changes when i run  Set-UnifiedGroup <group_smtpaddress> -CalendarMemberReadOnly:$true

As for Get-UnifiedGroup <group_smtpaddress> -IncludeAllProperties | fl *calendar*, remove the -IncludeAllProperties part and will work. 

Re: Calendar permissions on Office 365 groups?

IncludeAllProperties is being opened up to tenant admins, but may not be available to customers yet. I will post an update as soon as this gets available. 

If you remove Include all, and run these commands, are you able to see the change in OWA? Members will not be able to change or add appointments in the group calendar in OWA. 

Re: Calendar permissions on Office 365 groups?

Hi Daniel, This feature only works in OWA. Did you test this in OWA after running the "set" command?

Re: Calendar permissions on Office 365 groups?

Hi Krish, i checked, no changes to permissions, users can still modify existing appointments. 

Re: Calendar permissions on Office 365 groups?

Hi Daniel, Can you send me a mail at krish.gali@microsoft.com with your tenant and the group details so we can investigate what might be happening here?
Thanks,
Krish

Re: Calendar permissions on Office 365 groups?

Anders - Can you also send me a mail at krish.gali@microsoft.com if you continue to see that this feature doesn't work in your environment with your tenant and group details.

Re: Calendar permissions on Office 365 groups?

I would love to have this functionality for my teachers calender in our school. It would be very useful, to have to possibility to assign different "roles" for a group calender I know, that this can be achieved within SharePoint, but as I want to keep it simply, this feature would be very useful... Many greetings. Kurt

Re: Calendar permissions on Office 365 groups?

I also need to have the ability to set this field, just was asked if Members could have read only and supervisors/Owners could edit the calendar.

Tried running this:

Set-UnifiedGroup group.name@wgu.edu -CalendarMemberReadOnly:$true

And getting this error:

WARNING: The command completed successfully but no settings of 'group.name_asdfasfd6b6' have been modified.

Get-UnifiedGroup group.name@wgu.edu | fl calendar*

CalendarMemberReadOnly :  (blank)
CalendarUrl :  (blank)

Re: Calendar permissions on Office 365 groups?

Hi Casey,
I sent a mail to you last week on this and wanted to check if you were able to test the calendar and it functions as expected. The warning you saw while running the commandlet is wrong, and we are fixing that. We checked your group and it had the parameter set properly, so this group calendar should be read only for its members in Outlook on the web. Let me know.
Thanks,
Krish

Re: Calendar permissions on Office 365 groups?

Krish,

Yes- the permissions for the group in question are working as intended- Members can only read the calendar while Owners can add/edit items. Thank you!

 

Part of my confusion was that I didn't read the details of the Set-UnifiedGroup "CalendarMemberReadOnly" details closely enough:
The CalendarMemberReadOnly switch specifies whether to set read-only Calendar permissions to the Office 365 Group for members of the group.

  • To set read-only Calendar permissions, use the CalendarMemberReadOnly switch without a value.

 

  • To remove read-only Calendar permissions, use this exact syntax: -CalendarMemberReadOnly:$false.

Totally missed the Blank = feature is enabled bit, was expecting to see a True in there.

 

Thanks for your help!

Re: Calendar permissions on Office 365 groups?

Krish,

 

Our organization is having this issue as well.  We run the command as follows:

Set-UnifiedGroup <Group> -CalendarMemberReadOnly

 

The result is always "WARNING: The command completed successfully but no settings of 'ITTestSite' have been modified."

 

We then verify the result using the following:

Get-UnifiedGroup <Group> | fl *calendar*

 

The property "CalendarMemberReadOnly" returns with no value.  We have verified that all members are still able to delete and modify calendar items.  Can you provide any insight?

Re: Calendar permissions on Office 365 groups?

Hi there

 

I'm not 100% convinced yet.  Just doing some testing.

 

I had exactly the same.  WARNING: The command completed successfully but no settings of 'GroupName' have been modified.  I logged this with support and they came back telling me to  do the following:

Get-UnifiedGroup <primary smtp address of the group> -IncludeAllProperties |fl *cal*

 

I could see the CalendarMemberReadOnly attribute set to false (no empty)

 

I then ran the command again : set-unifiedgroup <primary smtp address of the group>

-CalendarMemberReadOnly:$true

 

The attribute now reports true and I have asked the users to test.

 

Re: Calendar permissions on Office 365 groups?

Thanks for the tip!  That seems to have done the trick for me as well.  I have some users testing now.  I'll reply to confirm after they report in.

Re: Calendar permissions on Office 365 groups?

I've done a bit of testing and it didn't seem to work. The members can still add calendar items in Outlook.

 

Let me know how you get on with your testing.

 

I'm hoping that it just takes a while to propagate the changes across the exchange online farm.

 

Adrian

 

 

Re: Calendar permissions on Office 365 groups?

This fixed our problem, but may not be suitable for yours.  After making this change, I have verified that you're correct and users can still create calendar events.  However, only owners can modify or delete.  That's all we wanted, but there does not seem to be a way to prevent event creation.

Re: Calendar permissions on Office 365 groups?

Slightly stranger than that.

 

I have confirmed that members do indeed only have read access in the portal.

 

However the same users connected with Outlook can still edit, create and delete.

 

This makes no sense at all.

Re: Calendar permissions on Office 365 groups?

Adrian - This feature was built specifically for our EDU customers who needed a way for teachers to control the calendar events and appointments from being modified by students in their classroom. Hence, it was first implemented in OWA with the goal of understanding how it would be used and then based on demand bring it to other endpoints including Outlook 2016. Let us know the use case for how you are planning to utilize this functionality in your organization and we can ensure it gets prioritized accordingly in Outlook 2016. 

Thanks,

Krish

Re: Calendar permissions on Office 365 groups?

Hi there, 

 

Happy to chat about this if you want to give me a call.

In most schools there will be a few people who write entries to the whole school calendar and the vast majority of teachers and support staff will be read only.

 

Its that simple.   Some might allow teachers to add events that then go through some for of approval process but in general its quite simple.

 

They will want the same permissions irrespective of OWA/Outlook etc.

Re: Calendar permissions on Office 365 groups?

Getting tired of Microsoft pushing half baked solutions. Here is a use case: We have an office with Attorney's and Paralegals and other staff. We need only the attorney's to be able to modify in a group called Statutes, but the other members of the group should be able to see the calendar. It's a standard shared mailbox/calendar setup, my hope was the new Office 365 group might make a good alternative to a shared mailbox setup, but maybe it's not the best option. For something like sharing a calendar, there are way too many options and all of them have caveats and drawbacks.

Re: Calendar permissions on Office 365 groups?

Agreed. One organization I'm working with wants to have a master calendar with important dates that everyone can read, but only want some people be able to add and edit. They also need to be able to reserve resources in this calendar so that they don't accidentally double book some venues or equipment.

 

Right now the only way to have a calendar with fine-grained permissions is in SharePoint, but SharePoint online no longer supports calendars with resources! Argh!

 

So now I get to go back to them with "well, you can either have a calendar that anyone can jack up but has all the features, or you can use a calendar that has the permission structure you want but is lacking the features".

Related Conversations