Use cases → Admin and governance
Adjust sharing on multiple user calendars in bulk
Change access to many users’ calendars centrally using a delegated service account, avoiding manual edits and missed accounts.
| Who it is for | Workspace admins needing to update calendar sharing for large user groups. |
|---|---|
| APIs | Calendar API, Admin SDK |
| Typical scopes | calendar, admin.directory.user.readonly |
The problem
Manually updating sharing settings across hundreds of user calendars is slow, error-prone, and untrackable. Central enforcement is required, especially for onboarding, offboarding, or compliance changes.
How it works
- Enumerate target users via the Admin SDK.
- For each user, impersonate their account with domain-wide delegation.
- Fetch the primary calendar and adjust ACLs as needed using the Calendar API.
- Log every change and retry failures after a delay.
What changes
Calendar sharing is applied consistently across all targeted users, with a record of changes and no manual gaps.
Questions people ask
Does this work for secondary calendars?
Only if you enumerate and address them explicitly. The primary calendar is predictable, but user-created calendars require additional listing and handling per user.
How can I confirm all changes have stuck?
After updating, re-fetch each calendar's ACL and compare to the intended state. Only treat the process as complete when the actual and desired lists match.
Want this built?
This is a pattern we run in production. We will set up the delegation and build this on top of it — $500 per hour, most of it working the same day.
Talk to us Or read the setup guideRelated use cases
Continuously verify your delegation still works
A scheduled probe that proves every API still answers under every tenant, before a customer finds out otherwise.
Automate onboarding task creation across new hires
Automatically generate Drive folders, assign Calendar events, and send welcome emails for each new user as they join the organisation.
Enforce confidentiality on calendar events in Workspace
Restrict visibility and enforce privacy levels on events using delegated service account access, rather than relying on user behaviour.