Microsoft: Update the navigation property calendar Permissions in users — users Calendar calendars Update Calendar Permissions
Microsoft usersCalendar.calendarsUpdateCalendarPermissions: arguments, response, policy and SDK examples.
← Users calendar operations · Get started
Operation microsoft.users_calendars_updatecalendarpermissions
Provider route: PATCH /users/{user-id}/calendars/{calendar-id}/calendarPermissions/{calendarPermission-id}. Alter supplies the connection’s credentials and routing.
Call through Alter
Section titled “Call through Alter”Install @alter-ai/sdk @alter-ai/microsoft with npm, or alter-sdk-microsoft with pip. Supply your connected customer’s grant ID and the arguments described below.
import { App } from "@alter-ai/sdk";import { MicrosoftIntegration } from "@alter-ai/microsoft";
async function execute(input: Parameters<MicrosoftIntegration["usersCalendar"]["calendarsUpdateCalendarPermissions"]>[0]) { const app = new App({ apiKey: process.env.ALTER_API_KEY! }); try { const provider = new MicrosoftIntegration(app, { grantId: process.env.PROVIDER_GRANT_ID! }); const call = await provider.usersCalendar.calendarsUpdateCalendarPermissions(input); const result = await call.wait(); return result.bodyJson(); } finally { await app.close(); }}import osfrom alter_sdk import Appfrom alter_sdk_microsoft import MicrosoftIntegration
async def execute(arguments): async with App(api_key=os.environ["ALTER_API_KEY"]) as app: provider = MicrosoftIntegration(app, {"grant_id": os.environ["PROVIDER_GRANT_ID"]}) call = await provider.users_calendar.calendars_update_calendar_permissions(arguments) result = await call.wait() return result.body_json()| Field | Type | Presence | Description and constraints |
|---|---|---|---|
$ | object | Root | Additional keys: not allowed |
path | object | Required within parent | Additional keys: not allowed |
path.user-id | string | Required within parent | |
path.calendar-id | string | Required within parent | |
path.calendarPermission-id | string | Required within parent | |
body | Model | Required within parent | Expand Create calendar Permission — request body — body |
Referenced models: Create calendar Permission — request body — body
Response
Section titled “Response”Response media type: application/json. The table describes the pinned successful response. Referenced models link to their complete fields.
| Field | Type | Presence | Description and constraints |
|---|---|---|---|
$ | Model | Root | Expand Get calendar Permission — response body |
Referenced models: Get calendar Permission — response body
Schemas
Section titled “Schemas”1 more schema is linked from the tables above, on the schema pages.
Get calendar Permission — response body
| Field | Type | Presence | Description and constraints |
|---|---|---|---|
$ | JSON | Root | |
$ (allOf 1) | Model | All variants apply | Expand Get rule — response body — @odata type, id |
$ (allOf 2) | object | All variants apply | |
$ (allOf 2).@odata.type | string | Optional | |
$ (allOf 2).allowedRoles | array | Optional | List of allowed sharing or delegating permission levels for the calendar. The possible values are: none, freeBusyRead, limitedRead, read, write, delegateWithoutPrivateEventAccess, delegateWithPrivateEventAccess, custom. |
$ (allOf 2).allowedRoles[] | JSON | Each item | |
$ (allOf 2).allowedRoles[] (anyOf 1) | string | Alternative | Known values: none, freeBusyRead, limitedRead, read, write, delegateWithoutPrivateEventAccess, delegateWithPrivateEventAccess, custom |
$ (allOf 2).allowedRoles[] (anyOf 2) | JSON | Alternative | |
$ (allOf 2).allowedRoles[] (anyOf 2) (anyOf 1) | object | Alternative | |
$ (allOf 2).allowedRoles[] (anyOf 2) (anyOf 2) | null | Alternative | |
$ (allOf 2).emailAddress | JSON | Optional | Represents a share recipient or delegate who has access to the calendar. For the 'My Organization' share recipient, the address property is null. Read-only. |
$ (allOf 2).emailAddress (anyOf 1) | Model | Alternative | Expand Get calendar Permission — response body — @odata type, allowed Roles, email Address, is Inside Organization, is Removable, role email Address @odata type, address, name |
$ (allOf 2).emailAddress (anyOf 2) | JSON | Alternative | |
$ (allOf 2).emailAddress (anyOf 2) (anyOf 1) | object | Alternative | |
$ (allOf 2).emailAddress (anyOf 2) (anyOf 2) | null | Alternative | |
$ (allOf 2).isInsideOrganization | JSON | Optional | |
$ (allOf 2).isInsideOrganization (anyOf 1) | boolean | Alternative | True if the user in context (recipient or delegate) is inside the same organization as the calendar owner. |
$ (allOf 2).isInsideOrganization (anyOf 2) | null | Alternative | |
$ (allOf 2).isRemovable | JSON | Optional | |
$ (allOf 2).isRemovable (anyOf 1) | boolean | Alternative | True if the user can be removed from the list of recipients or delegates for the specified calendar, false otherwise. The 'My organization' user determines the permissions other people within your organization have to the given calendar. You can't remove 'My organization' as a share recipient to a calendar. |
$ (allOf 2).isRemovable (anyOf 2) | null | Alternative | |
$ (allOf 2).role | JSON | Optional | Current permission level of the calendar share recipient or delegate. |
$ (allOf 2).role (anyOf 1) | string | Alternative | Known values: none, freeBusyRead, limitedRead, read, write, delegateWithoutPrivateEventAccess, delegateWithPrivateEventAccess, custom |
$ (allOf 2).role (anyOf 2) | JSON | Alternative | |
$ (allOf 2).role (anyOf 2) (anyOf 1) | object | Alternative | |
$ (allOf 2).role (anyOf 2) (anyOf 2) | null | Alternative |
Referenced models: Get calendar Permission — response body — @odata type, allowed Roles, email Address, is Inside Organization, is Removable, role email Address @odata type, address, name, Get rule — response body — @odata type, id
Create calendar Permission — request body — body
| Field | Type | Presence | Description and constraints |
|---|---|---|---|
$ | JSON | Root | |
$ (allOf 1) | Model | All variants apply | Expand Get rule — response body — @odata type, id |
$ (allOf 2) | object | All variants apply | |
$ (allOf 2).@odata.type | string | Optional | |
$ (allOf 2).allowedRoles | array | Optional | List of allowed sharing or delegating permission levels for the calendar. The possible values are: none, freeBusyRead, limitedRead, read, write, delegateWithoutPrivateEventAccess, delegateWithPrivateEventAccess, custom. |
$ (allOf 2).allowedRoles[] | JSON | Each item | |
$ (allOf 2).allowedRoles[] (anyOf 1) | string | Alternative | One of: none, freeBusyRead, limitedRead, read, write, delegateWithoutPrivateEventAccess, delegateWithPrivateEventAccess, custom |
$ (allOf 2).allowedRoles[] (anyOf 2) | JSON | Alternative | |
$ (allOf 2).allowedRoles[] (anyOf 2) (anyOf 1) | object | Alternative | |
$ (allOf 2).allowedRoles[] (anyOf 2) (anyOf 2) | null | Alternative | |
$ (allOf 2).emailAddress | JSON | Optional | Represents a share recipient or delegate who has access to the calendar. For the 'My Organization' share recipient, the address property is null. Read-only. |
$ (allOf 2).emailAddress (anyOf 1) | Model | Alternative | Expand Get calendar Permission — response body — @odata type, allowed Roles, email Address, is Inside Organization, is Removable, role email Address @odata type, address, name |
$ (allOf 2).emailAddress (anyOf 2) | JSON | Alternative | |
$ (allOf 2).emailAddress (anyOf 2) (anyOf 1) | object | Alternative | |
$ (allOf 2).emailAddress (anyOf 2) (anyOf 2) | null | Alternative | |
$ (allOf 2).isInsideOrganization | JSON | Optional | |
$ (allOf 2).isInsideOrganization (anyOf 1) | boolean | Alternative | True if the user in context (recipient or delegate) is inside the same organization as the calendar owner. |
$ (allOf 2).isInsideOrganization (anyOf 2) | null | Alternative | |
$ (allOf 2).isRemovable | JSON | Optional | |
$ (allOf 2).isRemovable (anyOf 1) | boolean | Alternative | True if the user can be removed from the list of recipients or delegates for the specified calendar, false otherwise. The 'My organization' user determines the permissions other people within your organization have to the given calendar. You can't remove 'My organization' as a share recipient to a calendar. |
$ (allOf 2).isRemovable (anyOf 2) | null | Alternative | |
$ (allOf 2).role | JSON | Optional | Current permission level of the calendar share recipient or delegate. |
$ (allOf 2).role (anyOf 1) | string | Alternative | One of: none, freeBusyRead, limitedRead, read, write, delegateWithoutPrivateEventAccess, delegateWithPrivateEventAccess, custom |
$ (allOf 2).role (anyOf 2) | JSON | Alternative | |
$ (allOf 2).role (anyOf 2) (anyOf 1) | object | Alternative | |
$ (allOf 2).role (anyOf 2) (anyOf 2) | null | Alternative |
Referenced models: Get calendar Permission — response body — @odata type, allowed Roles, email Address, is Inside Organization, is Removable, role email Address @odata type, address, name, Get rule — response body — @odata type, id
Get calendar Permission — response body — @odata type, allowed Roles, email Address, is Inside Organization, is Removable, role email Address @odata type, address, name
| Field | Type | Presence | Description and constraints |
|---|---|---|---|
$ | object | Root | |
@odata.type | string | Optional | |
address | JSON | Optional | |
address (anyOf 1) | string | Alternative | The email address of the person or entity. |
address (anyOf 2) | null | Alternative | |
name | JSON | Optional | |
name (anyOf 1) | string | Alternative | The display name of the person or entity. |
name (anyOf 2) | null | Alternative |
Policy, approvals and errors
Section titled “Policy, approvals and errors”SDK function policy ID: microsoft.users_calendars_updatecalendarpermissions. Catalog operation: users_calendars_updatecalendarpermissions. Rules can name either ID; function rules distinguish managed calls and conservatively cover raw calls sharing the route. Existing grant permissions and policy rules apply. wait() returns an immediate result or waits for a required approval; it never approves the request itself. Persist the approval ID to resume after a restart.
Provider errors retain their response; JSON decoding raises ProviderAPIError for provider failures. ManagedOperationError identifies contract/input/retention errors. See error handling and provider-specific behavior. Sensitive input may be refused before approval storage. A decoding error never resubmits a write.