azureblog.co.uk
← cd ~/compare
// compare · graph permissions

Calendars.Read.All vs Calendars.ReadWrite.All

Two Microsoft Graph permissions that are easy to mix up, side by side.

In short: Calendars.Read.All only reads. Calendars.ReadWrite.All can also create, change or delete. Use the read-only one unless your app needs to write.

Permission typeCalendars.Read.AllCalendars.ReadWrite.All
ApplicationRead all users' work hours and locations
Allows the app to read work hours and locations settings, recurrences, and occurrences for all users in the organization, without a signed-in user.
Always needs admin consent · High risk
Read and write all users' work hours and locations
Allows the app to read, create, update, and delete work hours and locations settings, recurrences, and occurrences for all users in the organization, without a signed-in user.
Always needs admin consent · High risk

Spotted something out of date or wrong? Tell us and we'll fix it.