Restricting access to just Calendar folders

The Cronofy calendar sync engine does not access email folders in Mailboxes.

However, it is possible to prevent this explicitly by using the Add-MailboxFolderPermission to specify explicit permissions for the Service Account on the end-user’s Mailbox.

Providing access to private calendar folders #

The Add-MailboxFolderPermission cmdlet in Powershell allows you to specify folder-level permissions for users, to a mailbox. Utilise this for more granular control over what users have access to.

Start by adding a user as a calendar delegate to a calendar with access to private items via PowerShell. The example below adds as a calendar delegate to with access to private items.

Add-MailboxFolderPermission -Identity\Calendar -User -AccessRights Editor -SharingPermissionFlags Delegate,CanViewPrivateItems

Editor is the access right necessary to allow a user to create, delete and read calendar items. If you wanted the user to be able to create calendars, change Editor to PublishingEditor.

Configuration for multiple accounts #

It is also possible to add calendar folder permissions for multiple users. Start by creating a csv file with users listed within it. The csv should be in the following format…


Once you’ve created and saved the csv, run the following query against it. In the example below, the file is called cronofy.csv.

Import-Csv cronofy.csv | foreach { Add-MailboxFolderPermission -Identity "$($_.alias):\Calendar" -User -AccessRights Editor -SharingPermissionFlags Delegate,CanViewPrivateItems

This will set the required permissions for each of the accounts listed within your csv file to the specified level.

Further reading #

Further information on the the Add-MailboxFolderPermission and additional parameters is available from Microsoft.

If you require any further assistance, feel free to contact us at