Approve Delegated Permissions for CalendarBridge for Microsoft 365

You may be here because a user attempted to connect CalendarBridge and Microsoft required administrator approval. This page explains how to approve CalendarBridge in the most common Microsoft 365 tenant configurations.

C Chad Updated February 23, 2026 4 min read

What CalendarBridge does

CalendarBridge securely syncs calendar availability and events across calendar systems (Microsoft 365, Google Workspace, iCloud, ICS). You remain in control — access can be restricted to specific users and revoked at any time. With a group account, you can also restrict which event details users are allowed to sync.

Why approval is required

In November 2025, Microsoft changed the default settings in Entra ID such that all third-party apps require administrator consent before a user can grant the app access to their calendars via Microsoft Graph. Depending on how your tenant is configured:

Option A — You received an admin consent request

This applies if a user clicked a “Request approval” option, or if you received an email or notification asking you to review an app request.

  1. Sign in to the Microsoft Entra admin center.
  2. In the left-most menu under Entra ID, click Enterprise apps.
  3. In the second-from-the-left menu under Activity, select Admin consent requests.
  4. Locate the request for CalendarBridge Inc.
  5. Click to review and approve the permissions. Note that it can take an hour or more for the permissions to propagate within Microsoft before the user stops seeing the approval-required screen.

Option B — No request exists (approve proactively)

This applies if the user saw “Admin approval required” but you do not see any pending approval requests in Entra ID.

  1. Open the CalendarBridge delegation authorization link.
  2. Sign in as a Microsoft 365 administrator.
  3. Review the permissions shown by Microsoft.
  4. Click Accept to grant admin consent. It can take an hour or more for the permissions to propagate.
shield
Important. Granting admin consent only allows users to grant CalendarBridge access. This acceptance alone does not give CalendarBridge access to any user’s calendar. Each user must still complete the Microsoft OAuth flow through CalendarBridge before their calendar can be accessed.

After granting consent, you can restrict which users may use CalendarBridge by enabling “Assignment required” in the CalendarBridge enterprise application and assigning only approved users or groups. See Restrict/Allow CalendarBridge to Certain Microsoft 365 Users.

Permissions and scope (high level)

When approving CalendarBridge, Microsoft displays user-friendly permission descriptions. The table below shows how those map to Microsoft Graph scopes and what they actually allow.

Microsoft consent textGraph scopeWhat it actually means
Sign in and read user profileUser.ReadAllows CalendarBridge to identify the signed-in user (name, email, user ID) during OAuth sign-in. Does not grant directory-wide access.
Have full access to calendarsCalendars.ReadWriteDelegated access to the calendar of the user who completes OAuth. Does not grant access to other users’ calendars and does not provide tenant-wide access.
Maintain access to data you have given it access tooffline_accessAllows CalendarBridge to refresh OAuth tokens so calendar syncing continues without repeated sign-ins. Does not expand permissions.

All permissions above are delegated. Granting admin consent allows users to sign in, but CalendarBridge does not gain access to any calendars until an approved user completes the OAuth flow. CalendarBridge does not request email, files, Teams chat, contacts, or directory-wide permissions.

Security and data handling