Delegated calendar (Early feature preview)

Email+ supports delegated access for Calendar. The delegated calendar option enables the calendar owner to assign their calendar to a delegated user within the organization's exchange Global Address List (GAL). To enable the Add Delegated Calendar option in Email+, configure the calendar_delegation value in enabled_features key value pair or in Optional Features restriction.

Microsoft Exchange server provides Reviewer, Editor, and Author level permissions, but in Email+ all permission levels are applied with the "Reviewer" permission. The delegated user can view event related updates on the Email+ app with this permission.

The Email+ app does not display private events, all private events in delegated calendar are hidden.

To configure delegation, configure the following key-value pairs:

  • Add calendar_delegation value to enabled_features key-value pair to add the Add Delegated Calendar option in the Email+ app
  • Add email_ews_host key-value pair with EWS host value as FQDN to provide access to EWS server when the values for email_exchange_host key-value pair are not fully qualified domain name of the exchange server.
  • Add ews_min_allowed_auth_mode key value pair to enable basic, certificate based authentication, and modern_auth authentication methods to the exchange server through EWS protocol. If Email+ is configured with eas_min_allowed_mode KVP as Modern Auth, add ews_min_allowed_auth_mode KVP with modern_auth value to enable modern authentication method to the EWS server.
  • If EWS server is not accessible publicly (located in private network), then VPN should be configured.

When a calendar is delegated, a system generated mail is sent to the delegated user with details of the calendar owner. The calendar owner has the ability to assign or deny access to the delegated calendar.

Adding delegated calendar

In the Email+ app, go to Calendar > Add Delegated Calendar option and enter the calendar owner's email address. Select the calendar owner to add the delegated calendar. you can assign a color to the delegated calendar to differentiate between assigned calendars.

The calendar owner delegates the calendar from the Microsoft Outlook on the web (OWA). For more information on delegation, see Microsoft documentation.

The user can manually remove the delegated calendar from the Email+ app. If the access to the deleted calendar is available, then user can again add that delegated calendar.

When the calendar owner removes access to the delegated calendar, Email+ receives "Delegated Calendar access has been denied" notification when the Email+ app is launched.

Disabling delegated calendar feature

The admin can disable the Add Delegated Calendar option from the Email+ app by removing calendar_delegation value from the enabled_features key value pair.

Email+ configurations supported for Delegated Calendar

The following table lists the supported Email+ and EWS configurations.

If EWS server is not accessible publicly (located in private network), then VPN should be configured.

Email+ Configuations

Additional Configurations for EWS

Supported

Ivanti EPMM and Ivanti Neurons for MDM with sentry, Modern auth with or without email_password KVP, Microsoft Office 365

Add email_ews_host KVP with EWS server value

Add ews_min_allowed_auth_mode = modern_auth KVP

Yes

Ivanti EPMM or Ivanti Neurons for MDM, without sentry, Modern auth with or without email_password KVP, Microsoft Office 365

Add ews_min_allowed_auth_mode = modern_auth KVP

Yes

Ivanti EPMM or Ivanti Neurons for MDM, with sentry, Modern auth with or without email_password KVP, Microsoft Office 365

Exchange host for EWS should have value of the EWS server

Add ews_min_allowed_auth_mode = modern_auth KVP

Yes

Ivanti EPMM or Ivanti Neurons for MDM, with sentry + Local certificate, Basic auth with or without email_password KVP, Microsoft Exchange versions 2013, 2016, and 2019, Microsoft Office 365

Add email_ews_host with EWS server value

Yes

Ivanti EPMM, with sentry + group certificate, Basic auth with or without email_password KVP, Microsoft Exchange versions 2013, 2016, and 2019, Microsoft Office 365

Add email_ews_host with EWS server value

Yes

Ivanti EPMM, with Sentry + MS scep certificate, Basic auth with or without email_password KVP, Microsoft Exchange versions 2013, 2016, and 2019, Microsoft Office 365

Add email_ews_host with EWS server value

Yes

Ivanti EPMM or Ivanti Neurons for MDM, with Sentry, Kerberos with prompt_email_password=true and enter password on Email+ login screen, Microsoft Exchange versions 2013, 2016, and 2019

Add email_ews_host with EWS server value

Yes

Ivanti EPMM or Ivanti Neurons for MDM, with Sentry, Kerberos with email_password KVP with hard coded value (which is not probably a use case), Microsoft Exchange versions 2013, 2016, and 2019

Add email_ews_host with EWS server value.

Yes

Ivanti EPMM or Ivanti Neurons for MDM, without sentry, Basic auth (with or without 'email_password' KVP), Microsoft Exchange versions 2013, 2016, and 2019, Microsoft Office 365

Add email_ews_host with EWS server value.

Yes

Ivanti EPMM or Ivanti Neurons for MDM, with or without sentry, Certificate based auth, Microsoft Exchange versions 2013, 2016, and 2019, Microsoft Office 365

Add email_ews_host with EWS server value

Add ews_min_allowed_auth_mode = cert_base KVP

Yes

Ivanti EPMM or Ivanti Neurons for MDM, with sentry, Kerberos (without 'email_password' KVP), Microsoft Exchange versions 2013, 2016, and 2019

 

No

Email+ does not show alerts and notifications for delegated events.