> ## Documentation Index
> Fetch the complete documentation index at: https://docs.atonom.ai/llms.txt
> Use this file to discover all available pages before exploring further.

# Calendar

> OAuth scopes and permissions for Google Calendar and Microsoft Calendar (Outlook) when connecting calendars to Atonom.

Atonom supports **calendar integrations** for Google Calendar and Microsoft Calendar (Outlook / Office 365) using user-delegated OAuth tokens. These integrations power meeting scheduling features such as availability lookup, booking, updating, and canceling events.

For step-by-step instructions on connecting and configuring your calendar after OAuth, see [Calendar Setup](/integrations/calendar-setup). For meeting types and booking templates, see [Meeting Types](/integrations/meeting-types).

Users connect a calendar from **My Settings → My Calendar** in the Atonom app. During OAuth, each provider prompts the user to grant the scopes listed below.

<Note>
  Calendar connection is per-user. Each user authorizes their own mailbox and calendar access. All permissions are **delegated** — Atonom acts on behalf of the signed-in user, not at the application/tenant-wide level. Tenant admins can optionally restrict who may connect a Microsoft calendar using an Entra security group — see the [Entra Integration guide](/SAML/entra#calendar-access-security-group-optional).
</Note>

## Google Calendar

Atonom requests the following scopes when a user connects Google Calendar:

| Scope                                            | Description                                                                                   | Used by Atonom for                                                                   |
| ------------------------------------------------ | --------------------------------------------------------------------------------------------- | ------------------------------------------------------------------------------------ |
| `https://www.googleapis.com/auth/calendar`       | See, edit, share, and permanently delete all calendars the user can access in Google Calendar | Listing calendars, reading busy times, and creating/updating/deleting meeting events |
| `https://www.googleapis.com/auth/userinfo.email` | View the user's email address                                                                 | Identifying the connected mailbox during connection verification                     |

### Admin notes (Google Cloud)

If your organization manages its own Google OAuth client for Atonom:

1. Create or use a Google Cloud OAuth 2.0 client (Web application type).
2. Enable the **Google Calendar API** for the project.
3. If your Google Workspace admin restricts third-party app access, allowlist the Atonom OAuth client for the scopes above.

***

## Microsoft Calendar (Outlook / Office 365)

Atonom requests the following Microsoft Graph **delegated** scopes when a user connects Microsoft Calendar:

| Scope                                               | Description                                                          | Used by Atonom for                                                                                              |
| --------------------------------------------------- | -------------------------------------------------------------------- | --------------------------------------------------------------------------------------------------------------- |
| `offline_access`                                    | Maintain access to data the user has granted; receive refresh tokens | Long-lived calendar connections without requiring the user to sign in again                                     |
| `https://graph.microsoft.com/User.Read`             | Sign in and read the signed-in user's profile                        | Resolving the connected user's mailbox address                                                                  |
| `https://graph.microsoft.com/Calendars.ReadWrite`   | Read and write events in the user's calendars                        | Listing calendars, reading busy times, and creating/updating/deleting meeting events on calendars the user owns |
| `https://graph.microsoft.com/Calendars.Read.Shared` | Read events in calendars shared with the user                        | Reading busy times on **shared or delegated calendars** when the user selects them in calendar settings         |

<Warning>
  **`Calendars.Read.Shared` is required for shared calendars.** If a user selects a calendar that was shared with them (rather than one they own), availability checks against that calendar require this scope. Without it, operations on the user's own calendars may still work, but shared-calendar selection can fail.
</Warning>

### Admin notes (Microsoft Entra)

If your organization manages its own Entra app registration for Atonom calendar access:

1. Register a multi-tenant application (or single-tenant, if your deployment uses a specific tenant ID).
2. Add the delegated Graph permissions matching the scopes above.
3. Grant **admin consent** in your tenant if your policy requires it for those permissions.
4. Optionally restrict which users may connect calendars using an Entra security group — see [Calendar Access Security Group](/SAML/entra#calendar-access-security-group-optional) in the Entra integration guide.

***

## Scope summary

| Provider               | Scopes requested                                                                             |
| ---------------------- | -------------------------------------------------------------------------------------------- |
| **Google Calendar**    | `https://www.googleapis.com/auth/calendar`, `https://www.googleapis.com/auth/userinfo.email` |
| **Microsoft Calendar** | `offline_access`, `User.Read`, `Calendars.ReadWrite`, `Calendars.Read.Shared`                |

## Disconnecting

Users can disconnect their calendar from **My Settings → My Calendar**. Disconnecting removes stored OAuth tokens for that provider from Atonom; it does not revoke the app in Google or Microsoft. Users who want to fully revoke access can do so from their [Google Account permissions](https://myaccount.google.com/permissions) or [Microsoft account app permissions](https://account.live.com/consent/Manage) pages.

## Need help?

If users see authorization errors, missing calendars, or shared-calendar failures:

* Confirm the OAuth client in Google Cloud or Entra includes the scopes in this document.
* For Microsoft shared calendars, verify `Calendars.Read.Shared` is granted.
* For Microsoft tenants with conditional access or consent policies, ensure the Atonom app is allowed and admin consent has been granted where required.

Contact [support@atonom.ai](mailto:support@atonom.ai) if you need assistance.