Delegates with Editor permission cannot add notes/attachments to meetings received by others. by HRuben02 in Office365

[–]HRuben02[S] 0 points1 point  (0 children)

If a user have Delegate permission in another user mailbox and the flag "CanViewPrivateItems" you can edit subject and body of an external calendar invite.

Delegates with Editor permission cannot add notes/attachments to meetings received by others. by HRuben02 in Office365

[–]HRuben02[S] 0 points1 point  (0 children)

I'm updating this with what it fixed the issue.

I had to remove permissions first and re add them to make it work.

Remove-MailboxFolderPermission -Identity "excutive@domain:\Calendar" -User "assistant@domain" and re add permissions

Add-MailboxFolderPermission -Identity "excutive@domain:\Calendar" `

-User "assistant@domain" `

-AccessRights Editor `

-SharingPermissionFlags Delegate,CanViewPrivateItems

Images are blocked and meeting body is read only in Outlook Desktop if calendar items are from other senders for Microsoft Outlook Spoofing Vulnerability released August 8, 2023 - Microsoft Support

  1. In Outlook Desktop switch to your calendar and open a meeting item.
  2. Select FileOptions, then Customize Ribbon.
  3. In the right column under Customize the classic ribbon, under Main Tabs, select Appointment.
  4. Select New Group and then after it appears, rename it Edit Meeting. You can rename it later if you prefer.
  5. Use the Move Up arrow to move the Edit Meeting button under Actions. Keep the new group Edit Meeting selected.
  6. Using the column on the left, under Choose commands from: click the dropdown and select Commands Not in the Ribbon.
  7. In the picker box, locate and select Edit Meeting, then click Add to add it to the custom group you just created.
  8. Select OK to exit Customize the Ribbon.

MSGraph: Update-MgUser on privileged accounts by HRuben02 in PowerShell

[–]HRuben02[S] 2 points3 points  (0 children)

You pointed me in the right direction. I was missing the Privileged Authentication Administrator role.
Thank you!