SOLVED

Calendar Sharing Auditing Report

%3CLINGO-SUB%20id%3D%22lingo-sub-858994%22%20slang%3D%22en-US%22%3ECalendar%20Sharing%20Auditing%20Report%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-858994%22%20slang%3D%22en-US%22%3E%3CP%3EHi%20all%2C%3C%2FP%3E%3CP%3EIs%20there%20a%20report%20where%20you%20can%20find%20a%20list%20of%20all%20the%20users%20who%20have%20shared%20their%20calendars%20externally%3F%20Assuming%20using%20the%20default%20Individual%20Sharing%20policy%20in%20EXO%20that%20allows%20anonymous%20share%20of%20'All%20calendar%20appointment%20information%2C%20including%20time%2C%20subject%2C%20location%20and%20title'.%26nbsp%3B%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3E%3CSPAN%20class%3D%22lia-inline-image-display-wrapper%20lia-image-align-inline%22%20style%3D%22width%3A%20999px%3B%22%3E%3CIMG%20src%3D%22https%3A%2F%2Fgxcuf89792.i.lithium.com%2Ft5%2Fimage%2Fserverpage%2Fimage-id%2F132154iCD272EFF4B4811AF%2Fimage-size%2Flarge%3Fv%3D1.0%26amp%3Bpx%3D999%22%20alt%3D%22EXO_Sharing_Policy.JPG%22%20title%3D%22EXO_Sharing_Policy.JPG%22%20%2F%3E%3C%2FSPAN%3E%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3Ethe%20only%20logs%20I%20could%20find%20in%20Audit%20log%20search%20was%20for%20the%20policy%20installation%2C%20but%20not%20sure%20how%20to%20get%20the%20details%20of%20the%20calendar%20sharing%20activity%20per%20user.%20Is%20there%20a%20way%20to%20pull%20such%20list%2Freport%20from%20Powershell%20if%20it's%20not%20available%20currently%20in%20the%20portal%3F%26nbsp%3B%3C%2FP%3E%3CP%3E%3CSPAN%20class%3D%22lia-inline-image-display-wrapper%20lia-image-align-inline%22%20style%3D%22width%3A%20999px%3B%22%3E%3CIMG%20src%3D%22https%3A%2F%2Fgxcuf89792.i.lithium.com%2Ft5%2Fimage%2Fserverpage%2Fimage-id%2F132157iF12728BEF001EE09%2Fimage-size%2Flarge%3Fv%3D1.0%26amp%3Bpx%3D999%22%20alt%3D%22EXO_Sharing_audit_log.JPG%22%20title%3D%22EXO_Sharing_audit_log.JPG%22%20%2F%3E%3C%2FSPAN%3E%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3EAppreciate%20any%20help%20%2Finsights.%26nbsp%3B%3C%2FP%3E%3CP%3EThanks!%3C%2FP%3E%3CP%3EAbeer%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-859457%22%20slang%3D%22en-US%22%3ERe%3A%20Calendar%20Sharing%20Auditing%20Report%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-859457%22%20slang%3D%22en-US%22%3E%3CP%3EEach%20%22share%22%20is%20stamped%20on%20the%20permissions%20on%20the%20Calendar%20folder%2C%20so%20you%20can%20just%20enumerate%20those.%20I%20have%20a%20sample%20script%20that%20does%20just%20that%20here%3A%26nbsp%3B%3CFONT%20style%3D%22background-color%3A%20%23ffffff%3B%22%3E%3CA%20href%3D%22https%3A%2F%2Fgallery.technet.microsoft.com%2FOffice-365-Calendar-29ef6211%3Fredir%3D0%22%20target%3D%22_blank%22%20rel%3D%22noopener%20noreferrer%22%3Ehttps%3A%2F%2Fgallery.technet.microsoft.com%2FOffice-365-Calendar-29ef6211%3Fredir%3D0%3C%2FA%3E%3C%2FFONT%3E%3C%2FP%3E%0A%3CP%3E%26nbsp%3B%3C%2FP%3E%0A%3CP%3EOnce%20you%20have%20the%20CSV%20file%2C%20you%20can%20filter%20it%20by%20External.%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-859530%22%20slang%3D%22en-US%22%3ERe%3A%20Calendar%20Sharing%20Auditing%20Report%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-859530%22%20slang%3D%22en-US%22%3E%3CP%3E%3CA%20href%3D%22https%3A%2F%2Ftechcommunity.microsoft.com%2Ft5%2Fuser%2Fviewprofilepage%2Fuser-id%2F58%22%20target%3D%22_blank%22%3E%40Vasil%20Michev%3C%2FA%3E%26nbsp%3BI%20just%20tried%20it%20in%20my%20test%20environment%20and%20it%20worked%20perfectly.%20There's%20no%20report%20with%20the%20same%20exact%20info%20that%20I%20can%20generate%20from%20the%20portal%3F%26nbsp%3B%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3EThank%20you%20very%20much%2C%20i%20appreciate%20your%20quick%20help!%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-860561%22%20slang%3D%22en-US%22%3ERe%3A%20Calendar%20Sharing%20Auditing%20Report%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-860561%22%20slang%3D%22en-US%22%3E%3CP%3ENo%2C%20no%20built-in%20reports%20for%20that.%20Otherwise%20I%20wouldn't%20bother%20to%20create%20a%20script%20%3AD%3C%2Fimg%3E%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-2142519%22%20slang%3D%22en-US%22%3ERe%3A%20Calendar%20Sharing%20Auditing%20Report%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-2142519%22%20slang%3D%22en-US%22%3E%3CP%3EHi%20Vasil%2C%20do%20you%20still%20have%20this%20script%20posted%20somewhere%3F%20the%20link%20doesn't%20appear%20to%20work.%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3EThanks%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-2375668%22%20slang%3D%22en-US%22%3ERe%3A%20Calendar%20Sharing%20Auditing%20Report%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-2375668%22%20slang%3D%22en-US%22%3E%3CP%3E%3CSPAN%3E%3CA%20href%3D%22https%3A%2F%2Ftechcommunity.microsoft.com%2Ft5%2Fuser%2Fviewprofilepage%2Fuser-id%2F58%22%20target%3D%22_blank%22%3E%40Vasil%20Michev%3C%2FA%3E%26nbsp%3B%3C%2FSPAN%3E%3CA%20href%3D%22https%3A%2F%2Ftechcommunity.microsoft.com%2Ft5%2Fuser%2Fviewprofilepage%2Fuser-id%2F969330%22%20target%3D%22_blank%22%3E%40pb1973%3C%2FA%3E%26nbsp%3BThe%20link%20for%20the%20script%20is%20not%20live%20anymore.%20Can%20you%20please%20share%20the%20script%20another%20way%3F%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-2506307%22%20slang%3D%22en-US%22%3ERe%3A%20Calendar%20Sharing%20Auditing%20Report%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-2506307%22%20slang%3D%22en-US%22%3E%3CP%3E%3CA%20href%3D%22https%3A%2F%2Ftechcommunity.microsoft.com%2Ft5%2Fuser%2Fviewprofilepage%2Fuser-id%2F1059993%22%20target%3D%22_blank%22%3E%40SanjayVishram%3C%2FA%3E%26nbsp%3Bto%20help%20anyone%20else%20that%20gets%20here%2C%20the%20script%20has%20been%20moved%20to%20GitHub%3C%2FP%3E%3CP%3E%3CA%20href%3D%22https%3A%2F%2Fgithub.com%2Fmichevnew%2FPowerShell%2Fblob%2Fmaster%2FCalendar_Permissions_inventory.ps1%22%20target%3D%22_blank%22%20rel%3D%22noopener%20noreferrer%22%3Ehttps%3A%2F%2Fgithub.com%2Fmichevnew%2FPowerShell%2Fblob%2Fmaster%2FCalendar_Permissions_inventory.ps1%3C%2FA%3E%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3EIt%20is%20in%20what%20i%20assume%20to%20be%26nbsp%3B%3CA%20href%3D%22https%3A%2F%2Ftechcommunity.microsoft.com%2Ft5%2Fuser%2Fviewprofilepage%2Fuser-id%2F58%22%20target%3D%22_blank%22%3E%40Vasil%20Michev%3C%2FA%3E%26nbsp%3Bown%20github%20library.%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3EI%20had%20to%20use%20WayBackMachine%20on%20that%20original%20link%20to%20find%20the%20script%20name%2C%20and%20from%20there%20I%20found%20it%20in%20GitHub%3C%2FP%3E%3C%2FLINGO-BODY%3E
Occasional Contributor

Hi all,

Is there a report where you can find a list of all the users who have shared their calendars externally? Assuming using the default Individual Sharing policy in EXO that allows anonymous share of 'All calendar appointment information, including time, subject, location and title'. 

 

EXO_Sharing_Policy.JPG

 

the only logs I could find in Audit log search was for the policy installation, but not sure how to get the details of the calendar sharing activity per user. Is there a way to pull such list/report from Powershell if it's not available currently in the portal? 

EXO_Sharing_audit_log.JPG

 

Appreciate any help /insights. 

Thanks!

Abeer

6 Replies
best response confirmed by abeerq (Occasional Contributor)
Solution

Each "share" is stamped on the permissions on the Calendar folder, so you can just enumerate those. I have a sample script that does just that here: https://gallery.technet.microsoft.com/Office-365-Calendar-29ef6211?redir=0

 

Once you have the CSV file, you can filter it by External.

@Vasil Michev I just tried it in my test environment and it worked perfectly. There's no report with the same exact info that I can generate from the portal? 

 

Thank you very much, i appreciate your quick help!

 

No, no built-in reports for that. Otherwise I wouldn't bother to create a script :D

Hi Vasil, do you still have this script posted somewhere? the link doesn't appear to work.

 

Thanks

@Vasil Michev @pb1973 The link for the script is not live anymore. Can you please share the script another way?

@SanjayVishram to help anyone else that gets here, the script has been moved to GitHub

https://github.com/michevnew/PowerShell/blob/master/Calendar_Permissions_inventory.ps1

 

It is in what i assume to be @Vasil Michev own github library.

 

I had to use WayBackMachine on that original link to find the script name, and from there I found it in GitHub