---
title: Delegated calendar
slug: emailplus/guide/ios/delegated-calendar
createdAt: 2026-09-07T11:21:47.684Z
---

Ivanti Email+ supports delegated access for Calendar. The delegated calendar option enables the calendar owner to assign their calendar to a delegated user within the organization's exchange Global Address List (GAL). To enable the **Add Delegated Mailbox** option in Email+, configure the **calendar\_delegation** value in **enabled\_features** key value pair.

Microsoft Exchange server provides Reviewer, Editor, and Author level permissions, in the Email+ app delegated user can create, view edit and remove calendar events according to permissions given by the owner. The delegated user can view event related updates on the Email+ app with this permission.





The following table displays the different delegation permissions and the actions they can perform:

| Permission level | Action allowed                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        |
| ---------------- | ------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------- |
| Reviewer         | With the Reviewer level permissions you can perform the following actions:<br />- Appointments (event without attendees) - no options<br />- Delegated calendar owner's created invite - no options<br />- Received invite – Reply / Reply All / Forward on behalf of                                                                                                                                                                                                                                                                                                                 |
| Author           | With the Author level permissions, you can perform the following actions:<br />- Appointments (event without attendees) - no options<br />- Delegated calendar owner's created invite - no options<br />- Received invite – Reply / Reply All / Forward on behalf of<br />- Author created appointments – no Reply / Reply All / Forward options. Edit button is displayed<br />- Author created invites – no Reply /Reply All / Forward options. Edit button is displayed                                                                                                            |
| Editor           | With the Editor level permissions, you can perform the following actions:<br />- Appointments (event without attendees) - no Reply / Reply All / Forward options. Edit button is displayed<br />- Delegated calendar owner's created invite – no Reply / Reply All / Forward options. Edit button is displayed<br />- Received invite – Reply / Reply All / Forward on behalf of<br />- Editor created appointments - no Reply / Reply All / Forward options. Edit button is displayed<br />- Editor created invite - no Reply /Reply All / Forward options. Edit button is displayed |

To configure delegation, configure the following key-value pairs:

- Add **calendar\_delegation** value to **enabled\_features** key-value pair to add the **Add Delegated Mailbox** option in the Email+ app.
- Add **email\_ews\_host** key-value pair with EWS host value as FQDN to provide access to EWS server.
- Add **ews\_min\_allowed\_auth\_mode** key value pair to enable basic, certificate based authentication, and modern\_auth authentication methods to the exchange server through EWS protocol. If Email+ is configured with **eas\_min\_allowed\_mode** KVP as Modern Auth, add **ews\_min\_allowed\_auth\_mode** KVP with **modern\_auth** value to enable modern authentication method to the EWS server.
- If EWS server is not accessible publicly (located in private network), then VPN should be configured.

When a calendar is delegated, a system generated mail is sent to the delegated user with details of the calendar owner. The calendar owner has the ability to assign or deny access to the delegated calendar.

### Adding delegated calendar

In the Email+ app, go to **Settings > Accounts > Add** option and enter the calendar owner's email address. Select the calendar owner to add the delegated calendar. You can assign a color to the delegated calendar to differentiate between assigned calendars.

:::hint{type="info"}
The calendar owner delegates the calendar from the Microsoft Outlook on the web (OWA). For more information on delegation, see [Microsoft documentation](https://support.microsoft.com/en-us/office/allow-someone-else-to-manage-your-mail-and-calendar-41c40c04-3bd1-4d22-963a-28eafec25926).
:::

The user can manually remove the delegated calendar from the Email+ app. If the access to the deleted calendar is available, then user can again add that delegated calendar.

When the calendar owner removes access to the delegated calendar, Email+ receives "**Delegated Calendar access has been denied**" notification when the Email+ app is launched.

### Disabling delegated calendar feature

The admin can disable the **Add Delegated Mailbox** option from the Email+ app by removing **calendar\_delegation** value from the **enabled\_features** key value pair.

## Ivanti Email+ configurations supported for Delegated Calendar

The following table lists the supported Email+ and EWS configurations.

:::hint{type="info"}
If EWS server is not accessible publicly (located in private network), then VPN should be configured.
:::

| Email+ Configuations                                                                                                                                                                          | Additional Configurations for EWS                                                                                                                                                | Supported |
| --------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------- | -------------------------------------------------------------------------------------------------------------------------------------------------------------------------------- | --------- |
| Ivanti EPMM and Ivanti Neurons for MDM with sentry, Modern auth with or without **email\_password** KVP, Microsoft Office 365                                                                 | Add **email\_ews\_host** KVP with EWS server value<br />Add **ews\_min\_allowed\_auth\_mode = modern\_auth** KVP                                                                 | Yes       |
| Ivanti EPMM or Ivanti Neurons for MDM, without sentry, Modern auth with or without **email\_password** KVP, Microsoft Office 365                                                              | Add **ews\_min\_allowed\_auth\_mode = modern\_auth** KVP                                                                                                                         | Yes       |
| Ivanti EPMM or Ivanti Neurons for MDM, with sentry, Modern auth with or without **email\_password** KVP, Microsoft Office 365                                                                 | **Exchange host for EWS** should have value of the EWS server<br />Add **ews\_min\_allowed\_auth\_mode = modern\_auth** KVP                                                      | Yes       |
| Ivanti EPMM or Ivanti Neurons for MDM, with sentry + Local certificate, Basic auth with or without **email\_password** KVP, Microsoft Exchange versions 2016 and 2019, Microsoft Office 365   | Add **email\_ews\_host** with EWS server value                                                                                                                                   | Yes       |
| Ivanti EPMM, with sentry + group certificate, Basic auth with or without **email\_password** KVP, Microsoft Exchange versions 2016 and 2019, Microsoft Office 365                             | Add **email\_ews\_host** with EWS server value                                                                                                                                   | Yes       |
| Ivanti EPMM, with Sentry + MS scep certificate, Basic auth with or without **email\_password** KVP, Microsoft Exchange versions 2016 and 2019, Microsoft Office 365                           | Add **email\_ews\_host** with EWS server value                                                                                                                                   | Yes       |
| Ivanti EPMM or Ivanti Neurons for MDM, with Sentry, Kerberos with **prompt\_email\_password=true** and enter password on Email+ login screen, Microsoft Exchange versions 2016 and 2019       | Add **email\_ews\_host** with EWS server value                                                                                                                                   | Yes       |
| Ivanti EPMM or Ivanti Neurons for MDM, with Sentry, Kerberos with **email\_password** KVP with hard coded value (which is not probably a use case), Microsoft Exchange versions 2016 and 2019 | Add **email\_ews\_host** with EWS server value.                                                                                                                                  | Yes       |
| Ivanti EPMM or Ivanti Neurons for MDM, without sentry, Basic auth (with or without 'email\_password' KVP), Microsoft Exchange versions 2016 and 2019, Microsoft Office 365                    | Add **email\_ews\_host** with EWS server value.                                                                                                                                  | Yes       |
| Ivanti EPMM or Ivanti Neurons for MDM, with or without sentry, Certificate based auth, Microsoft Exchange versions 2016 and 2019                                                              | Add **email\_ews\_host** with EWS server value<br />Add **ews\_min\_allowed\_auth\_mode = cert\_base** KVP .<br />For **cert\_base** KVP, Microsoft Office 365 is not supported. | Yes       |
| Ivanti EPMM or Ivanti Neurons for MDM, with sentry, Kerberos (without 'email\_password' KVP), Microsoft Exchange versions 2016 and 2019                                                       |                                                                                                                                                                                  | No        |

:::hint{type="info"}
Email+ does not show alerts and notifications for delegated events.
:::
