Acl: insert

Requires authorization

Creates an access control rule. Try it now or see an example.


HTTP request

POST https://www.googleapis.com/calendar/v3/calendars/calendarId/acl


Parameter name Value Description
Path parameters
calendarId string Calendar identifier. To retrieve calendar IDs call the calendarList.list method. If you want to access the primary calendar of the currently logged in user, use the "primary" keyword.


This request requires authorization with the following scope (read more about authentication and authorization).


Request body

In the request body, supply an Acl resource with the following properties:

Property name Value Description Notes
Required Properties
role string The role assigned to the scope. Possible values are:
  • "none" - Provides no access.
  • "freeBusyReader" - Provides read access to free/busy information.
  • "reader" - Provides read access to the calendar. Private events will appear to users with reader access, but event details will be hidden.
  • "writer" - Provides read and write access to the calendar. Private events will appear to users with writer access, and event details will be visible.
  • "owner" - Provides ownership of the calendar. This role has all of the permissions of the writer role with the additional ability to see and manipulate ACLs.
scope object The scope of the rule.
scope.type string The type of the scope. Possible values are:
  • "default" - The public scope. This is the default value.
  • "user" - Limits the scope to a single user.
  • "group" - Limits the scope to a group.
  • "domain" - Limits the scope to a domain.
Note: The permissions granted to the "default", or public, scope apply to any user, authenticated or not.
Optional Properties
scope.value string The email address of a user or group, or the name of a domain, depending on the scope type. Omitted for type "default". writable


If successful, this method returns an Acl resource in the response body.


Note: The code examples available for this method do not represent all supported programming languages (see the client libraries page for a list of supported languages).


Uses the Java client library.

import com.google.api.services.calendar.Calendar;
import com.google.api.services.calendar.model.AclRule;

// ...

// Initialize Calendar service with valid OAuth credentials
Calendar service = new Calendar.Builder(httpTransport, jsonFactory, credentials)

// Create access rule with associated scope
AclRule rule = new AclRule();
Scope scope = new Scope();

// Insert new access rule
AclRule createdRule = service.acl().insert('primary', rule).execute();


Uses the Python client library.

rule = {
    'scope': {
        'type': 'scopeType',
        'value': 'scopeEmail',
    'role': 'role'

created_rule = service.acl().insert(calendarId='primary', body=rule).execute()

print created_rule['id']


Uses the PHP client library.

$rule = new Google_Service_Calendar_AclRule();
$scope = new Google_Service_Calendar_AclRuleScope();


$createdRule = $service->acl->insert('primary', $rule);
echo $createdRule->getId();


Uses the Ruby client library.

rule = {
  'scope' => {
    'type' => 'scopeType',
    'value' => 'scopeEmail',
  'role' => 'role'
result = client.execute(:api_method => service.acl.insert,
                        :parameters => {'calendarId' => 'primary'},
                        :body => JSON.dump(rule),
                        :headers => {'Content-Type' => 'application/json'})
print result.data.id

Try it!

Use the APIs Explorer below to call this method on live data and see the response.

Send feedback about...

Google Calendar API
Google Calendar API