How can I make all users calendar shared with all other users?

Iron Contributor

How can I make the calendar for all users in a particular group shared with all other users in that group? And, any time I add a new user to the all staff group, their calendar is automatically shared?

 

Thank you!

14 Replies
Hi Edward , Create a new distribution group, add all members to enter, open the Outlook calendar permissions to add a newly created distribution group, set the privilege level!

But how can i do this for all useres without each person having to set their own permissions indiviually.

 

In other words, i have a group called All Staff. Now, I want to set every member of that group to have reviewer permission on every other users calendar.

 

Thanks @Dongjie!

HI Edward
Try to share each user into the group with the Powershell command
(cmdlet Set-MailboxFolderPermission )

Hi Edward,

 

You can do this:

  • Connect to Office 365 Exchange Online
  • Create a security group called for example "YourSecrurityGroup"
  • Add users to that group
  • Execute the folowing script
    • $GroupMembers = Get-DistributionGroupMember YourSecurityGroup
    • foreach ($GroupMember in $GroupMembers) { Add-MailboxFolderPermission -Identity (""+ $GroupMember.Guid+ ":\Calendar") -User YourSecurityGroup -AccessRights Editor}

Hi Edward,

 

I would say create a shared calender and make few users to be the owners. 

 

https://support.office.com/en-gb/article/Video-Create-a-shared-calendar-in-Office-365-61b96006-70e2-...

 

Regards

Hi Edward
Use the powershell loop statement to add each user's shared calendar permissions
reference:
foreach ($Mailbox in (Get-Mailbox -ResultSize Unlimited)) { Add-MailboxFolderPermission -identity "$($Mailbox.Name):\Kalender" -AccessRights LimitedDetails -User Default }

http://blog.powershell.no/2010/09/20/managing-calendar-permissions-in-exchange-server-2010/
https://technet.microsoft.com/en-us/library/ff522363.aspx?f=255&MSPPError=-2147217396


Hope to help you! thanks!

How can I apply permissions to a group, and then have that permission level automatically applied to new users that are added to that group? 

You need to run the full script on a schedule, say weekly, or you need to run just the main bit of the script, set-mailboxpermission, once you create a new user. There is no automation in Exchange Online around user creation

This is correct, and frustrating to some extent. Yes, it's easy enough to schedule a script to reapply the permission at a defined interval, but it would be really nice if permissions updated dynamically when a new member is added to a security group that has been delegated access to an object.

 

I have been all over the Internet looking for something that works. Finally contacted Microsoft support and they provided me with this, which works perfectly.

 

If in Windows 10, Powershell ISE will be pre-installed. Otherwise you need to install this. 

Run as administrator to open

Run this script. It will ask you to login to your Office 365 administrator account and which level of common access you want to provide (we went for reviewer). 

 

#GIVE ALL USERs ACCESS TO ALL CALENDAR
cls
Set-ExecutionPolicy RemoteSigned -Scope CurrentUser
$UserCredential = Get-Credential
$Session = New-PSSession -ConfigurationName Microsoft.Exchange -ConnectionUri https://outlook.office365.com/powershell-liveid/ -Credential $UserCredential -Authentication Basic -AllowRedirection
Import-PSSession $Session
Write-Output "======================================================="
Write-host "============= Setting Calendar Permission =============" -foreground "yellow"
Write-Output "======================================================="
$useAccess = Get-Mailbox -ResultSize Unlimited -Filter {RecipientTypeDetails -eq "UserMailbox"} | Select Identity
cls
Write-Host "AccessRights: None, Owner, PublishingEditor, Editor, PublishingAuthor, Author, NonEditingAuthor, Reviewer, Contributor" -foreground "yellow"
Write-Host "This script will attempt to modify and add a user permission. You may have an error message if the user is already added. Please ignore." -foreground "darkcyan"
Write-Host "---------------------" -foreground "gray"
$accRight=read-host "Please enter the desired access right for all users. Ex: Reviewer"
ForEach ( $user in $useAccess ) {
Get-Mailbox -ResultSize Unlimited | ForEach {
If ( $_.Identity -ne $user.Identity ) {
Add-MailboxFolderPermission "$($_.SamAccountName):\calendar" -User $user.Identity -AccessRights $accRight
Set-MailboxFolderPermission "$($_.SamAccountName):\calendar" -User $user.Identity -AccessRights $accRight
}
}
}
cls
Write-Output "======================================================="
Write-host "============ CALENDAR INFORMATION UPDATED =============" -foreground "green"
Write-Output "======================================================="
ForEach ($mbx in Get-Mailbox -ResultSize Unlimited) {Get-MailboxFolderPermission ($mbx.Name + “:\Calendar”) | Select Identity,User,AccessRights | ft -Wrap -AutoSize}
 
Good luck
 
 
Hey David,
Did you run this in your instance? Any fallout? Thnx.

@RalphHaney Its a long time since I ran this code, but it worked fine at the time. As I mentioned in the original post, it was a common problem and the MS support team were really committed to creating a solution. The company has shrunk since then, so all diary access has become less of an issue. 

@David_Stone2100  Thanks for the blast-from-the-past followup. I don't like it when I'm asked to override default privacy permissions on a platform, but it is what it is. I do want to stay employed. :) Appreciate your time.