Set up Calendar Interop
Allow Calendar users to see Exchange availability data
Next, set up Microsoft® Exchange availability sharing to allow Google Calendar users to see availability information for Exchange calendar users.
If you are using a G Suite domain with an alias, make sure that you have set up your alias domain correctly before continuing. For details, see Set up Calendar Interop using a domain alias.
Set up Exchange calendar availability sharingStep 1: Set up your Exchange users
- Make sure each Exchange user has an Exchange account with an associated mailbox.
- Make sure each Exchange user satisfies one of the following requirements:
- No G Suite account.
- A G Suite account with Google Calendar disabled.
Note: You also need to check that the user doesn't have a personal Google account that uses the domain name of your organization. This can create a conflicting account. Learn more about conflicting accounts.
Enable full event detail lookups
To use full event detail lookups, check the calendar's visibility when you set up mailboxes. You must ensure the calendar's visibility is set to at least limited event details (the default visibility is to expose free/busy information only). Then, the Exchange calendar event details are visible to Google Calendar users.
You can expose limited event details for an individual mailbox using the following script:
($Mailbox.alias+’:\calendar’) –user Default –Accessrights
For all mailboxes, use:
$allmailbox = Get-Mailbox -Resultsize Unlimited
Foreach ($Mailbox in $allmailbox)
($Mailbox.alias+’:\calendar’) –user Default –Accessrights LimitedDetails}
On port 443, enable inbound internet connectivity so that the Exchange server can be reached by Google Calendar. This requires an SSL certificate issued by a trusted public internet root Certificate Authority.
For details on certificates, see the following Microsoft instructions:
To block all incoming traffic except for requests originating from Calendar Interop, whitelist the following IPv4 range: 22.214.171.124/27.
If you use IPv6, whitelist the following IP blocks:
Create an Exchange role account. The role account (also known as a mail user account) should be a low-privilege account without an associated mailbox. The account is only for availability lookups. Google Calendar uses the account to authenticate with your Exchange server in order to look up the availability details of Exchange users. Events must be shared with the Exchange role account to be visible in Google Calendar.
For details on creating a mail user account, see the following Microsoft instructions:
- If you have an existing account that you use for OrgWide availability lookups from untrusted forests, you can reuse that account.
- To avoid service disruption, it's recommended that you turn off password expiration for the role account.
- In your Admin console, go to Apps G Suite Calendar.
Important: Make sure you sign in to your primary domain.
- Click Calendar Interop management.
- Under Exchange Web Services URL, enter the URL of the Exchange Web Services (EWS) server associated with your Exchange server. This is the same Exchange server where you created the role account.
- Your server’s EWS server URL is most likely https://<Exchange server hostname>/EWS/Exchange.asmx.
- You can verify the URL by running the following command in Exchange PowerShell:
Get-WebServicesVirtualDirectory | Select name, *url* | fl
- If you have multiple URLs, use
- Under Exchange Role Account:
- In the firstname.lastname@example.org format, enter the Exchange role account username.
- Click Enter Password and enter the password for the role account.
- Reenter the password to confirm.
- Under Availability lookups, select the level of lookup detail:
- No information visible
- Free/busy information visible
- Event details visible
- Click Save changes.