# Free/Busy Calendar Access Mode The Free/Busy Calendar Access Mode is now available for Office 365 Enterprise connections. This allows you to grant more restricted access to your organization’s calendars. > **INFO:** The method Microsoft provides for reading Free/Busy calendar information has the following caveat: We are only able to query the Free/Busy times in the user's primary calendar. Free/Busy times in additional calendars are not available to us. As Free/Busy access is **read-only**, Cronofy can see whether a user is free or busy at a given time, but cannot see event details and does not have permission to write events directly into the user's calendar. See [this documentation](/calendar-admins/enterprise-connect-office365-graph/which-graph-scopes-does-cronofy-utilize/index.md) for more information on the Microsoft Graph scopes Cronofy utilizes. Events can still be created through Cronofy, but instead of being written directly into their calendar, event invites are sent to the customer’s inbox which they can accept. Updates to these created events will also be sent to the user’s inbox. For more detail on how this behaves for developers, see [Free/Busy Access](/developers/authorization/access-modes/free-busy/index.md). ## Service account requirements The account you sign in with during the connection process acts as the service account for your organization's Free/Busy connection. It needs: - **An Exchange Online mailbox.** Free/Busy connections read your users' schedules through the service account's own calendar, so the account must have a real mailbox. Any Microsoft 365 license that includes Exchange Online is sufficient — for example E3, E5 or F3. - **A standard user role.** The service account does not need to be a Global Administrator, or hold any other admin role. Cronofy reads availability using Microsoft's [getSchedule](https://learn.microsoft.com/en-us/graph/api/calendar-getschedule) API, which returns whatever Free/Busy information each user's calendar permissions expose to the service account. In most tenants this requires no further configuration. We recommend using a dedicated account rather than a named individual's, so that the connection isn't affected if that person leaves the organization. > **INFO:** If the service account signs in successfully but no availability is returned, the most likely cause is that calendar visibility has been narrowed within your tenant — for example by a calendar sharing policy, or by a change to the default calendar permissions on user mailboxes. ## Connecting your calendars The steps to connect your organization's calendar follows a similar authorization flow to the steps found [here](/calendar-admins/enterprise-connect-office365-graph/index.md) but you will be provided with a different authorization screen instead where you will need to select Free/Busy: ![](/calendar-admins/enterprise-connect-office365-graph/free-busy-access-mode/ec-access-modes.858513e7d0e1b645aab55ab38db4b5194f706dcf9aaa876ad7b8d8213fb17329.png) Then from here you will need to select Microsoft 365: ![](/calendar-admins/enterprise-connect-office365-graph/free-busy-access-mode/ec-access-modes-providers.68cb0a6b9609bb16b779ccd3ee8946b99861fd3ef5b3ce6f990cfcc007f7ac8e.png) Once this has been selected you will be taken to the following screen to link your Office 365 tenant: ![](/calendar-admins/enterprise-connect-office365-graph/free-busy-access-mode/ec-access-modes-link-o365.6d9bb6d7337e1209e8378427b726d61d9f8d1bcb2c83f5ad8d5fc0395bdb02a1.png) After selecting **Link Office 365 Account** you will see a screen similar to this. ![](/calendar-admins/enterprise-connect-office365-graph/free-busy-access-mode/enterprise-connect-graph-2.98af2cde974979b4eeee6738e60f12411b7a1dd55a4c2f7c6fc38c10541b99c6.png) Log in to your Office 365 tenant as the service account you have chosen for the connection. This account provides the mailbox that Free/Busy queries are made through, and does not itself need to hold an administrative role — see [Service account requirements](#service-account-requirements) above and [Administrator involvement](#administrator-involvement) below. You’ll see the following screen to approve the necessary permissions for Enterprise Connect: ![](/calendar-admins/enterprise-connect-office365-graph/free-busy-access-mode/ec-access-modes-confirm-scopes.cd583c38f4858918c854de1109dc83c76276bd5b3bb14d2bcd09b40853723348.png) Once complete, you’ll be redirected back to your software vendor’s application where they’ll synchronise your user's calendars. ## Administrator involvement Connecting your organization's calendars is an administrator-led process. The service account does not itself need to hold an administrative role, but your administrators remain in control of the connection between Cronofy and your tenant: - **Approving access.** An administrator of your Microsoft 365 tenant must consent to the Cronofy application before any calendars can be read. - **Managing the connection.** Reviewing and revoking a software provider's access is done through your [Enterprise Connect Dashboard](https://app.cronofy.com/jump/enterprise_connect), which requires administrator access. The service account provides the mailbox that Free/Busy queries are made through. It does not grant Cronofy any access that an administrator has not already approved. ### Granting admin consent If your tenant requires administrator approval for applications, the service account will see a *"Need admin approval"* message when it signs in. An administrator then needs to consent to the Cronofy application once, on behalf of the tenant. This can be done in the [Microsoft Entra admin center](https://entra.microsoft.com): - Sign in as a Global Administrator, Cloud Application Administrator, or Privileged Role Administrator. Any of these roles is able to grant the consent. - Navigate to **Entra ID** > **Enterprise applications**. - Select **Cronofy Enterprise for Office 365 - Free/Busy** (Application ID `9437e0a7-15ef-46bd-9106-da9b1477234d`). - Under **Security** > **Permissions**, select **Grant admin consent for {your organization}**. - Review the requested permissions and accept. See [which Graph scopes Cronofy utilizes](/calendar-admins/enterprise-connect-office365-graph/which-graph-scopes-does-cronofy-utilize/index.md) for details of what each permission is used for. An administrator can also complete the connection flow themselves, where they will be offered the option to consent on behalf of the organization. > **INFO:** If the application is not yet listed under **Enterprise applications**, it has not been added to your tenant. Ask your software provider for the Cronofy admin consent link, which adds and consents to the application in a single step — see ["Need admin approval" when authorizing Cronofy](/calendar-admins/faqs/need-admin-approval-error/index.md). If you have any questions regarding Free/Busy Calendar Access Modes or if you are a Cronofy Scheduler customer connecting your organization's calendars, please contact us at [support@cronofy.com](mailto:support@cronofy.com). --- [Read in HTML](/calendar-admins/enterprise-connect-office365-graph/free-busy-access-mode/) ## In this section - [Booking Microsoft resource calendars with Free/Busy](/calendar-admins/enterprise-connect-office365-graph/free-busy-access-mode/microsoft-resource-calendars/index.md) — How to get events onto Microsoft resource calendars when connected via Free/Busy access. - [Restricting which mailboxes Cronofy can see](/calendar-admins/enterprise-connect-office365-graph/free-busy-access-mode/restrict-service-account-access/index.md) — How to prevent a Free/Busy service account from reading the calendars of specific people in your Microsoft 365 tenant.