Authorize room calendar access
A customer Microsoft 365 admin grants tenant-wide consent so VCA can read and manage room calendars.
This page is for the Microsoft 365 admin in the customer tenant.
You will need the consent link or application ID before you start.
What permission prompts may appear
Depending on which Room Calendar features are enabled, the consent screen may request:
Place.Read.AllCalendars.ReadCalendars.ReadWritewhen booking actions such as create, extend, or release are enabled
Review the permission list carefully before approving it. The approval applies to the whole tenant, not just to one user.
Before you start
Please confirm the following:
- You have an admin account that is allowed to grant Microsoft Graph application permissions. In most tenants, this means a Global Administrator or Privileged Role Administrator.
- You have the consent link or application ID.
- You are signing in to the correct Microsoft 365 tenant for the room mailboxes you want to authorize.
Grant tenant-wide consent
Sign in with a customer tenant admin account
Use an admin account in the Microsoft Entra tenant that owns the room mailboxes.
Open the consent link
Use the consent link you received.
If you need to build the link manually, use the endpoint that matches the tenant cloud:
Global:
https://login.microsoftonline.com/{tenant-id}/adminconsent?client_id={client-id}
China:
https://login.partner.microsoftonline.cn/{tenant-id}/adminconsent?client_id={client-id}Replace {tenant-id} with the customer tenant ID and {client-id} with the VCA application ID.
If the room mailboxes are hosted in Microsoft 365 operated by 21Vianet, use the China endpoint. Approving the global endpoint does not grant consent for the China cloud tenant.
If something goes wrong
permission_deniedusually means the admin canceled the request or the account does not have enough privileges.unauthorized to consentusually means the signed-in user cannot grant tenant-wide consent for the requested permissions.- If the consent page does not appear, double-check that you are signing in to the correct tenant.
After consent
Once the customer tenant administrator approves the request, VCA can use the granted app permissions to access the room calendars that are bound in VCA.
If you later need to revoke access, ask your Microsoft 365 administrator to remove the VCA app or revoke the tenant-wide approval in Microsoft Entra.