How to set the calendar permission for a group so that only the group administrator has the editing permission, while the group users only have the viewing permission?

Question

How to set the calendar permission for a group so that only the group administrator has the editing permission, while the group users only have the viewing permission?

Albert Tang 0

连接 Microsoft Graph（需要管理员权限）

Connect-MgGraph -Scopes "Group.ReadWrite.All", "Directory.Read.All", "Calendars.ReadWrite"

定义目标组名称（修改为您要管理的组名）

$groupName = "HC School wide"

获取目标组ID和所有者（管理员）信息

$targetGroup = Get-MgGroup -Filter "displayName eq '$groupName'" -Top 1

if (-not $targetGroup) {

Write-Error "找不到组: $groupName"

exit

}

$groupId = $targetGroup.Id

$groupOwners = Get-MgGroupOwner -GroupId $groupId

获取当前日历权限（清理旧权限）

$currentPermissions = Get-MgGroupCalendarPermission -GroupId $groupId

foreach ($permission in $currentPermissions) {

Remove-MgGroupCalendarPermission -GroupId $groupId -CalendarPermissionId $permission.Id

Write-Host "已移除旧权限: $($permission.EmailAddress)"

}

为组管理员添加 Write 权限

foreach ($owner in $groupOwners) {

$ownerUser = Get-MgUser -UserId $owner.Id

New-MgGroupCalendarPermission -GroupId $groupId -BodyParameter @{

    "emailAddress" = @{ "address" = $ownerUser.Mail }

    "role" = "write"

}

Write-Host "已授予管理员权限 (Write): $($ownerUser.Mail)"

}

为所有成员添加 Read 权限

$groupMembers = Get-MgGroupMember -GroupId $groupId

foreach ($member in $groupMembers) {

$memberUser = Get-MgUser -UserId $member.Id

if ($memberUser.Mail -and $groupOwners.Id -notcontains $member.Id) {

    New-MgGroupCalendarPermission -GroupId $groupId -BodyParameter @{

        "emailAddress" = @{ "address" = $memberUser.Mail }

        "role" = "read"

    }

    Write-Host "已授予成员权限 (Read): $($memberUser.Mail)"

}

}

Write-Host "`n操作完成！权限已更新："

Get-MgGroupCalendarPermission -GroupId $groupId | Select-Object EmailAddress, Role

Rukmini 43,915 Microsoft External Staff Moderator

Albert Tang Make use of below Powershell script, that removes any existing calendar permissions, assigns Write permissions to all group owners, and assigns Read permissions to all group members who are not owners.


Connect-MgGraph -Scopes "Group.ReadWrite.All","Directory.Read.All","Calendars.ReadWrite"

$groupName = "HC School wide"

$group = Get-MgGroup -Filter "displayName eq '$groupName'" -Top 1

if (-not $group) { throw "Group not found: $groupName" }

$groupId = $group.Id

$owners = (Get-MgGroupOwner -GroupId $groupId) | Where-Object { $_.AdditionalProperties['userPrincipalName'] }

$ownerIds = $owners.Id

$members = (Get-MgGroupMember -GroupId $groupId) | Where-Object { $_.'@odata.type' -eq "#microsoft.graph.user" }

$existing = Get-MgGroupCalendarPermission -GroupId $groupId

foreach ($perm in $existing) {

    Remove-MgGroupCalendarPermission -GroupId $groupId -CalendarPermissionId $perm.Id -Confirm:$false

}

Start-Sleep -Seconds 2

foreach ($owner in $owners) {

    $mail = $owner.AdditionalProperties['mail']

    if ($mail) {

        New-MgGroupCalendarPermission -GroupId $groupId -BodyParameter @{

            emailAddress = @{ address = $mail }

            role = "write"

        }

    }

}

foreach ($member in $members) {

    if ($ownerIds -contains $member.Id) { continue }

    $mail = $member.AdditionalProperties['mail']

    if ($mail) {

        New-MgGroupCalendarPermission -GroupId $groupId -BodyParameter @{

            emailAddress = @{ address = $mail }

            role = "read"

        }

    }

}

Get-MgGroupCalendarPermission -GroupId $groupId | Select EmailAddress, Role

Let me know if any further queries - feel free to reach out!

Rukmini 43,915 Reputation points Microsoft External Staff Moderator

2025-11-24T10:11:34.4066667+00:00

Albert Tang Following up to see if the above provided information was helpful. If you have any further queries do let us know.

Your answer

Rukmini 43,915 Reputation points Microsoft External Staff Moderator

2025-11-21T12:03:29.66+00:00

Albert Tang Make use of below Powershell script, that removes any existing calendar permissions, assigns Write permissions to all group owners, and assigns Read permissions to all group members who are not owners.

Connect-MgGraph -Scopes "Group.ReadWrite.All","Directory.Read.All","Calendars.ReadWrite" $groupName = "HC School wide" $group = Get-MgGroup -Filter "displayName eq '$groupName'" -Top 1 if (-not $group) { throw "Group not found: $groupName" } $groupId = $group.Id $owners = (Get-MgGroupOwner -GroupId $groupId) | Where-Object { $_.AdditionalProperties['userPrincipalName'] } $ownerIds = $owners.Id $members = (Get-MgGroupMember -GroupId $groupId) | Where-Object { $_.'@odata.type' -eq "#microsoft.graph.user" } $existing = Get-MgGroupCalendarPermission -GroupId $groupId foreach ($perm in $existing) { Remove-MgGroupCalendarPermission -GroupId $groupId -CalendarPermissionId $perm.Id -Confirm:$false } Start-Sleep -Seconds 2 foreach ($owner in $owners) { $mail = $owner.AdditionalProperties['mail'] if ($mail) { New-MgGroupCalendarPermission -GroupId $groupId -BodyParameter @{ emailAddress = @{ address = $mail } role = "write" } } } foreach ($member in $members) { if ($ownerIds -contains $member.Id) { continue } $mail = $member.AdditionalProperties['mail'] if ($mail) { New-MgGroupCalendarPermission -GroupId $groupId -BodyParameter @{ emailAddress = @{ address = $mail } role = "read" } } } Get-MgGroupCalendarPermission -GroupId $groupId | Select EmailAddress, Role

Let me know if any further queries - feel free to reach out!
Rukmini 43,915 Reputation points Microsoft External Staff Moderator

2025-11-24T10:11:34.4066667+00:00

Albert Tang Following up to see if the above provided information was helpful. If you have any further queries do let us know.