Permissions required for the Microsoft Exchange Online IntegrationHub spoke actionsSummary<!-- /*NS Branding Styles*/ --> .ns-kb-css-body-editor-container { p { font-size: 12pt; font-family: Lato; color: #000000; } span { font-size: 12pt; font-family: Lato; color: #000000; } h2 { font-size: 24pt; font-family: Lato; color: black; } h3 { font-size: 18pt; font-family: Lato; color: black; } h4 { font-size: 14pt; font-family: Lato; color: black; } a { font-size: 12pt; font-family: Lato; color: #00718F; } a:hover { font-size: 12pt; color: #024F69; } a:target { font-size: 12pt; color: #032D42; } a:visited { font-size: 12pt; color: #00718f; } ul { font-size: 12pt; font-family: Lato; } li { font-size: 12pt; font-family: Lato; } img { display: ; max-width: ; width: ; height: ; } } This article lists the Microsoft Graph API permissions required for actions available in the Microsoft Exchange Online Spoke. These permissions are essential for enabling actions such as calendar and mail management within the ServiceNow IntegrationHub Microsoft 365 environment. If permissions are not correctly configured in Azure AD, you may encounter authorization errors or failed actions during flow execution. For details on how to configure and set up the spoke, refer to:Setting up the Microsoft Exchange Online Spoke Release<!-- /*NS Branding Styles*/ --> .ns-kb-css-body-editor-container { p { font-size: 12pt; font-family: Lato; color: #000000; } span { font-size: 12pt; font-family: Lato; color: #000000; } h2 { font-size: 24pt; font-family: Lato; color: black; } h3 { font-size: 18pt; font-family: Lato; color: black; } h4 { font-size: 14pt; font-family: Lato; color: black; } a { font-size: 12pt; font-family: Lato; color: #00718F; } a:hover { font-size: 12pt; color: #024F69; } a:target { font-size: 12pt; color: #032D42; } a:visited { font-size: 12pt; color: #00718f; } ul { font-size: 12pt; font-family: Lato; } li { font-size: 12pt; font-family: Lato; } img { display: ; max-width: ; width: ; height: ; } } N/A Instructions<!-- /*NS Branding Styles*/ --> .ns-kb-css-body-editor-container { p { font-size: 12pt; font-family: Lato; color: #000000; } span { font-size: 12pt; font-family: Lato; color: #000000; } h2 { font-size: 24pt; font-family: Lato; color: black; } h3 { font-size: 18pt; font-family: Lato; color: black; } h4 { font-size: 14pt; font-family: Lato; color: black; } a { font-size: 12pt; font-family: Lato; color: #00718F; } a:hover { font-size: 12pt; color: #024F69; } a:target { font-size: 12pt; color: #032D42; } a:visited { font-size: 12pt; color: #00718f; } ul { font-size: 12pt; font-family: Lato; } li { font-size: 12pt; font-family: Lato; } img { display: ; max-width: ; width: ; height: ; } } Calendar Management ActionDelegated (Work/School)Delegated (Personal)Application Copy Attachment to Calendar Event Calendars.ReadWrite Calendars.ReadWrite Calendars.ReadWrite Create Calendar Event Calendars.ReadWrite Calendars.ReadWrite Calendars.ReadWrite Create Recurring Calendar Events Calendars.ReadWrite Calendars.ReadWrite Calendars.ReadWrite Delete Attachment Calendars.ReadWrite Calendars.ReadWrite Calendars.ReadWrite Delete Calendar Event Calendars.ReadWrite Calendars.ReadWrite Calendars.ReadWrite Find Meeting Times Calendars.Read, Calendars.ReadWrite Not supported Not supported Look up Attachments by Event ID Calendars.Read Calendars.Read Calendars.Read Look up Calendar by ID Calendars.ReadBasic, Calendars.Read, Calendars.ReadWrite Calendars.ReadBasic, Calendars.Read, Calendars.ReadWrite Calendars.ReadBasic, Calendars.Read, Calendars.ReadWrite Look up Calendar Events by User ID Calendars.ReadBasic, Calendars.Read, Calendars.ReadWrite Calendars.ReadBasic, Calendars.Read, Calendars.ReadWrite Calendars.ReadBasic, Calendars.Read, Calendars.ReadWrite Look up Calendar View Stream Calendars.ReadBasic, Calendars.Read, Calendars.ReadWrite Calendars.ReadBasic, Calendars.Read, Calendars.ReadWrite Calendars.ReadBasic, Calendars.Read, Calendars.ReadWrite Look up Calendars Stream Calendars.ReadBasic, Calendars.Read, Calendars.Read.Shared, Calendars.ReadWrite Calendars.ReadBasic, Calendars.Read, Calendars.Read.Shared, Calendars.ReadWrite Calendars.ReadBasic, Calendars.Read, Calendars.ReadWrite Look up Event by ID Calendars.ReadBasic, Calendars.Read Calendars.ReadBasic, Calendars.Read Calendars.ReadBasic, Calendars.Read Look up Schedules Calendars.ReadBasic, Calendars.Read, Calendars.ReadWrite Not supported Calendars.ReadBasic, Calendars.Read, Calendars.ReadWrite Look up Out of Office Settings Mail.Read, Mail.Read.Shared Mail.Read Mail.Read Look up Time Zones User.Read, User.ReadBasic.All User.Read User.Read.All Update Calendar Event Calendars.ReadWrite Calendars.ReadWrite Calendars.ReadWrite Mail Management ActionDelegated (Work/School)Delegated (Personal)Application Delete Message Mail.ReadWrite Mail.ReadWrite Mail.ReadWrite Look Up Mail Folders by User ID Mail.ReadBasic, Mail.Read, Mail.ReadWrite Mail.ReadBasic, Mail.Read, Mail.ReadWrite Mail.ReadBasic, Mail.Read, Mail.ReadWrite Look Up Messages by Mail Folder ID Mail.ReadBasic, Mail.Read, Mail.ReadWrite Mail.ReadBasic, Mail.Read, Mail.ReadWrite Mail.ReadBasic, Mail.Read, Mail.ReadWrite Look Up Messages by User ID Mail.ReadBasic, Mail.Read, Mail.ReadWrite Mail.ReadBasic, Mail.Read, Mail.ReadWrite Mail.ReadBasic, Mail.Read, Mail.ReadWrite Send Mail Mail.Send Mail.Send Mail.Send Set Mailbox Auto Reply MailboxSettings.ReadWrite MailboxSettings.ReadWrite MailboxSettings.ReadWrite Mailbox Management These actions use PowerShell cmdlets and do not require Graph API permissions. ActionDescription Create Mailbox Uses PowerShell cmdlets Delete Mailbox Uses PowerShell cmdlets Enable Mailbox Uses PowerShell cmdlets Look up Mailbox Uses PowerShell cmdlets