Authorize room calendar access
A customer Microsoft 365 admin grants tenant-wide consent so VCA can read and manage room calendars.
This page is for the Microsoft 365 admin in the customer tenant.
You will need the consent link or application ID before you start.
What permission prompts may appear
Depending on which Room Calendar features are enabled, the consent screen may request:
Place.Read.AllCalendars.ReadCalendars.ReadWritewhen booking actions such as create, extend, or release are enabled
Review the permission list carefully before approving it. The approval applies to the whole tenant, not just to one user.
Before you start
Please confirm the following:
- You have an admin account that is allowed to grant Microsoft Graph application permissions. In most tenants, this means a Global Administrator or Privileged Role Administrator.
- You have the consent link or application ID.
- You are signing in to the correct Microsoft 365 tenant for the room mailboxes you want to authorize.
Grant tenant-wide consent
Sign in with a customer tenant admin account
Use an admin account in the Microsoft Entra tenant that owns the room mailboxes.
Open the consent link
Use the consent link you received.
If you need to build the link manually, it follows this format:
https://login.microsoftonline.com/{tenant-id}/adminconsent?client_id={client-id}Replace {tenant-id} with the customer tenant ID and {client-id} with the VCA application ID.
Review the requested permissions
Check that the permission list matches the features your organization wants to use. If the app is only used for reading room calendars, you should usually see read permissions. If booking actions are enabled, write permissions will also appear.
Approve the request
Accept the request to grant access for the whole tenant. Microsoft Entra will add the VCA app to the customer tenant and record the approval for the whole organization.
Return to VCA and verify the connection
After approval, return to VCA Cloud and complete or refresh the room calendar connection if needed.
If your organization has more than one Microsoft 365 tenant, repeat the consent process once for each tenant.
If something goes wrong
permission_deniedusually means the admin canceled the request or the account does not have enough privileges.unauthorized to consentusually means the signed-in user cannot grant tenant-wide consent for the requested permissions.- If the consent page does not appear, double-check that you are signing in to the correct tenant.
After consent
Once the customer tenant administrator approves the request, VCA can use the granted app permissions to access the room calendars that are bound in VCA.
If you later need to revoke access, ask your Microsoft 365 administrator to remove the VCA app or revoke the tenant-wide approval in Microsoft Entra.