domainwidedelegation.comGet it set up

Use cases → Scheduling

Map calendar visibility to team roles via delegation

Automate who can see which calendars by syncing Google Calendar ACLs to role assignments in your directory.

Who it is forAdmins managing access to sensitive or high-volume calendars across multiple teams.
APIsCalendar API, Admin SDK
Typical scopescalendar, admin.directory.group.readonly

The problem

Manual calendar sharing gets out of sync with team changes, so former staff retain access or new joiners miss meetings. Group-based sharing in the Calendar UI is brittle and doesn’t scale to hundreds of calendars.

How it works

  1. Define calendar access rules by mapping directory groups to calendar IDs.
  2. Use the Admin SDK to fetch current group memberships.
  3. Compare group membership to current calendar ACLs via the Calendar API.
  4. Apply adds/removes so calendar ACLs match group membership exactly.
  5. Log every change and alert on unexpected results.

What changes

Calendar visibility tracks actual roles, so onboarding and offboarding are immediate and auditable.

The trap in this one. Calendar ACL changes via the API can silently exceed the 100-ACL per-calendar limit (including inherited and deleted entries), causing new grants to fail with a generic 403 error. The API does not specify which entry pushed you over the limit or which principal was skipped, so you must count ACLs before modifying and handle partial updates explicitly.

Questions people ask

Can we use Google Groups as ACL principals?

Yes, but group membership changes can take several minutes to propagate to calendar access, so new members may not see events immediately.

Does this work for resource calendars?

Resource calendars use the same ACL model, but often have legacy owners or auto-generated ACLs that must be cleaned up before automation.

Want this built?

This is a pattern we run in production. We will set up the delegation and build this on top of it — $500 per hour, most of it working the same day.

Talk to us Or read the setup guide

Related use cases

Route calendar invites for approval via a group

Use a delegated service account to intercept, review, and approve calendar invitations sent to sensitive team addresses before they reach calendars.

Automatically assign meeting rooms using delegation

Automate the allocation of calendar resources like rooms by impersonating users with a service account, avoiding double-bookings and manual intervention.

Automate room booking with a delegated service account

Book and manage meeting rooms across an organisation automatically, using a service account with domain-wide delegation.