To be able to book a room on the spot, your Room Booking System will need access to read and write your company’s calendar.
No other permissions are necessary. Your Room Booking System does not access any other data besides meeting information provided through the calendar and does not store this data on our servers in any persistent storage. This data is always stored on Exchange 2013’s servers and always streamed on-demand in real-time.
To improve usability we do cache the room data between multiple consecutive requests against the calendar API in memory.
Your Room Booking System will, however, need to save the user details and password of the Microsoft Exchange 2013 user with access rights to the Room Booking System mailbox resource, as this is the information needed to pair your Room Booking System with this calendar. No worries: this information will be used for login purposes only and will not be processed in any way.