Exchange.ManageAsApp
— application permission, granted to the app registration with admin consent.
Endpoints:
Get-EXOMailbox · Get-MailboxFolderStatistics -FolderScope Calendar · Get-MailboxFolderPermission · Get-MailboxCalendarFolder
The scan makes three calls per mailbox in the single PowerShell runspace - expect a long run on large tenants; other PowerShell reports wait meanwhile.
If a permission is missing, this report shows a red load error with the Graph status code — not an empty table.
Calendar Folder Permissions
By default everyone in the organisation sees only free/busy on a colleague's calendar. Mailboxes where 'Default' was raised to Reviewer or above expose meeting subjects, attendees and locations to the whole company - and 'Anonymous' access exposes them to the internet.
Press Run scan to read every user mailbox's calendar permissions (also feeds Published Calendars).