will review permissions work on a shared calendar if a distribution list is added as member of mail enabled security group

Question

will review permissions work on a shared calendar if a distribution list is added as member of mail enabled security group

Anonyms_Karki 0

I want to give calendar review permissions only to some people on a shared mailbox no delegate access.

so I have a two Distribution groups and added them as member of mail enabled security group and granted security group reviewer access right on shared calendar.

But it's not working. they can't view the meetings

Will it work ? Or should I directly add people in security group in place of DL ?

0 comments

Answer accepted by question author

0 additional answers

Your answer

Answer 1

Hi,

Unfortunately, it won't work with distribution lists nested inside the security group. That's why your users can't see the meetings.

Calendar folder permissions in Exchange Online only apply to security principals. A plain distribution list is not security-enabled, so when Exchange checks whether a user is in your mail-enabled security group, membership that only comes through the distribution list doesn't count. The security group has Reviewer, but the people in the nested lists never inherit it.

What to do:

Add the users directly to the mail-enabled security group instead of the distribution lists. You can also nest other mail-enabled security groups, but not plain distribution lists.

Connect-ExchangeOnline
Add-DistributionGroupMember -Identity "CalendarReviewers" -Member ******@contoso.com

Check the permission on the shared calendar. If the folder is not in English, use its local name, such as :\Kalender.

Get-MailboxFolderPermission -Identity "******@contoso.com:\Calendar"

If the group isn't listed, add it. If it's listed with a different role, use Set-MailboxFolderPermission instead.

Add-MailboxFolderPermission -Identity "******@contoso.com:\Calendar" -User "CalendarReviewers" -AccessRights Reviewer

Give it some time. Group membership and permission changes can take up to an hour to apply, and Outlook in cached mode can take longer to catch up.
Have each user add the calendar themselves. Granting permission to a group doesn't send anyone a sharing invite. In Outlook, they go to Add calendar > Open shared calendar (or From directory in Outlook on the web) and pick the shared mailbox.

Reviewer gives them read-only access to meeting details without delegate rights, which matches what you're after.

If this answer helps, please click "Accept Answer" so others with the same question can find it.