A pretty dumb application to delete all possible shared permissions on your work Outlook calendars.
Register application in azure and create API permissions
- Select
App registrations
in https://portal.azure.com, using your work account - Select
+ New Registation
and create a new registration- Ensure that
Accounts in this organizational directory only (University College London only - Single tenant)
is selected - For the redirect URI select
Public client/native (mobile & desktop)
and enterhttps://login.microsoftonline.com/common/oauth2/nativeclient
for the URL - Click
Register
- Ensure that
- Note down the
Application (client) ID
value andDirectory (tenant) ID
value in the redirect page - The redirect page will have a Client Credentials in the table: click
Add a certificate or secret
- Add a new secret with a sensible name and expiration date, noting down the secret value
- On the left hand side of the main page click on the
API permissions
- Click on
+ Add a permission
and selectMicrosoft Graph
- Select
Delegated Permissions
- In the
Select Permissions
search box, enterCalendars
- From the permission table below, expand
Calendars
and tickCalendars.ReadWrite
- Then select
Add permissions
- Click on
Configure local application
- Clone and install the repository
git clone git@github.com:stefpiatek/calendar_bouncer.git cd calendar_bouncer pip install -e .
- Copy and the secret credentials and replace dummy values with those noted down
from the previous steps, along with your work email and password
cp example.secrets.toml .secrets.toml # Now edit the file
- If you haven't run the application before, run it from the command line so
that it will generate a URL for you to consent to the application carrying out
delegated calendar actions for you
calendar_bouncer
- Click on the link in the STD out, logging in and accepting the permissions (redirect is expected to be a blank page)
- The application should now be able to run from the CLI successfully
calendar_bouncer