Trying to set up an all staff calendar in Microsoft 365 - is there a way for users to be able to view the calendar, but not edit it?

Posted by PsyduckAF@reddit | sysadmin | View on Reddit | 5 comments

It was suggested I create a 365 group that contains all staff members. I've set this up with dynamic membership, so the users are being pulled from the 'Staff' on-prem AD group. If users are a member of this 365 group though, they have the ability to edit the calendar attached to it. I only want the owner(s) to be able to add/modify events on the calendar. If there isn't a way, is there a different solution to create an all staff calendar, that is viewable for all staff in Outlook, but only select users have the ability to add/modify the calendar events?

Reply to Post

5 Comments

[-]

Sufficient_Pear_4055@reddit

Can't you just open the calender (In Outlook) (make sure your "normal" user is owner) Right click > properties > sharing and permissions Check that you are owner and then give everyone else (or the dynamic group) "viewer" ?

[-]

PsyduckAF@reddit (OP)

I'm using the browser Outlook. Can't see any options to edit permissions for the calendar unfortunately.

[-]

J0nny05@reddit

You can do this via exchange online powershell, the m365 group is classed as a unified group in exchange. Run Set-UnifiedGroup “your group here” -CalendarMemberReadonly:$true and that will make it so members only have view permissions

[-]

PsyduckAF@reddit (OP)

Seems to not be working anymore :( Getting this error: Set-UnifiedGroup: Object reference not set to an instance of an object. Others seem to have issues also: [https://github.com/MicrosoftDocs/office-docs-powershell/issues/11047](https://github.com/MicrosoftDocs/office-docs-powershell/issues/11047)

[-]

scrubmortis@reddit

Imagine this is the same as on prem exchange, so with powershell connection to your m365 tenant: get-mailboxfolderpermission "Mailboxname:\calendar" This will list current permissions Use add-mailboxfolderpermission if an entry doesn't already exist, otherwise use set-mailboxfolderpermission to change an existing permission entry. add-mailboxfolderpermission "Mailboxname:\calendar" -user <group or user you want to grant acces> -accessrights Reviewer "Reviewer" has read only "Editor" can add/edit/change all but not mess with permissions. "Author" can create but not edit items created by others. https://learn.microsoft.com/en-us/exchange/client-developer/web-service-reference/calendarpermissionlevel