To book a room on the spot, your Room Booking System will need access to read and write your company’s calendar. No other permissions are necessary.
Your Room Booking System does not access any other data besides meeting information provided through the calendar and does not store this data on our servers in any persistent storage. This data is always stored on Office 365 servers and always streamed on-demand in real-time.
To improve usability we do cache the room data between multiple consecutive requests against the calendar API in memory.
Your Room Booking System will, however, need to save the user details and password when pairing with Office 365 as a delegated user. Read more about the different permissions needed when pairing your Room Booking System with Office 365 here.