domainwidedelegation.comStart free

Use cases → Admin and governance

Adjust sharing on multiple user calendars in bulk

Change access to many users’ calendars centrally using a delegated service account, avoiding manual edits and missed accounts.

Who it is forWorkspace admins needing to update calendar sharing for large user groups.
APIsCalendar API, Admin SDK
Typical scopescalendar, admin.directory.user.readonly

The problem

Manually updating sharing settings across hundreds of user calendars is slow, error-prone, and untrackable. Central enforcement is required, especially for onboarding, offboarding, or compliance changes.

How it works

  1. Enumerate target users via the Admin SDK.
  2. For each user, impersonate their account with domain-wide delegation.
  3. Fetch the primary calendar and adjust ACLs as needed using the Calendar API.
  4. Log every change and retry failures after a delay.

What changes

Calendar sharing is applied consistently across all targeted users, with a record of changes and no manual gaps.

The trap in this one. The Calendar API’s ACL updates are eventually consistent — rapid, repeated changes to the same calendar can silently drop entries or revert to a previous state if they overlap in-flight. If you run the process in parallel, you can easily overwrite your own changes or hit stale etags, resulting in missing or partial permissions that aren’t caught unless you re-read and re-verify after every update.

Questions people ask

Does this work for secondary calendars?

Only if you enumerate and address them explicitly. The primary calendar is predictable, but user-created calendars require additional listing and handling per user.

How can I confirm all changes have stuck?

After updating, re-fetch each calendar's ACL and compare to the intended state. Only treat the process as complete when the actual and desired lists match.

Want this built?

This is a pattern we run in production. We will set up the delegation and build this on top of it — $500 per hour, most of it working the same day.

Talk to us Or read the setup guide

Related use cases

Continuously verify your delegation still works

A scheduled probe that proves every API still answers under every tenant, before a customer finds out otherwise.

Propagate role-based access changes across Workspace

Synchronise changes in group or role membership so document, calendar and mailbox access reflects the current organisational structure.

Enforce guest invite policy on calendar events

Automatically review and adjust Google Calendar event guest lists to prevent unauthorised external attendees in line with policy.