Authorize the Global Meeting Scheduler multi-tenant service architecture for your Microsoft 365 tenant to enable seamless Single Sign-On and cross-time-zone meeting optimization.
Authorizes the Global Meeting Scheduler service principal and Microsoft Graph permissions in your tenant. This allows our backend services to safely resolve participant working hours and mailbox timezones on behalf of signed-in attendees.
08f23efc-e4a2-4f14-a2f8-0cd3f446ede3)
User.Read.All, MailboxSettings.Read, GroupMember.Read.All)
Global Meeting Scheduler adheres to the principle of least privilege, requesting only standard read scopes necessary to compute equitable meeting suggestions:
| Permission | Type | Purpose |
|---|---|---|
| User.Read | Delegated | Reads signed-in user's profile to identify local time zone and working hours. |
| User.Read.All | Delegated | Reads meeting attendee display names and profiles to look up time zones. |
| MailboxSettings.Read | Application | Reads mailbox settings (working hours, working days, and time zones) for all meeting attendees across the tenant. |
| GroupMember.Read.All | Delegated | Expands Distribution Lists and Microsoft 365 Groups invited to the meeting. |
| access_as_user | Delegated (TzPlanner API) | Allows Outlook client to invoke TzPlanner API suggestion calculations on behalf of user. |
For automated tenant provisioning pipelines or MSP environments, you can execute this snippet via Microsoft Graph PowerShell SDK:
# Connect to customer tenant
Connect-MgGraph -Scopes "Application.ReadWrite.All", "DelegatedPermissionGrant.ReadWrite.All"
# Instantiate Global Meeting Scheduler Service Principal
$clientSp = Get-MgServicePrincipal -Filter "appId eq '08f23efc-e4a2-4f14-a2f8-0cd3f446ede3'"
if (-not $clientSp) {
Write-Host "Creating Global Meeting Scheduler Service Principal..."
$clientSp = New-MgServicePrincipal -AppId "08f23efc-e4a2-4f14-a2f8-0cd3f446ede3"
}
Write-Host "Global Meeting Scheduler tenant authorization completed successfully."