Session objective

Fix the Microsoft Graph backend blocker by creating a mailbox-backed SAIL-AWAY calendar target, inspect available logs, and preserve a clean handoff for the PTO sync migration.

What was accomplished

• Created shared mailbox sail-away@kylawoffice.com with display name SAIL-AWAY using Exchange Online app-token connection.
• Verified Exchange created it as RecipientTypeDetails = SharedMailbox.
• Verified Graph /users/sail-away@kylawoffice.com returns 200.
• Verified Graph /users/sail-away@kylawoffice.com/calendar returns 200, with owner SAIL-AWAY <sail-away@kylawoffice.com> and writable calendar flags.
• Ran a Graph create/delete smoke test on the new mailbox calendar:
  • create event returned 201
  • delete event returned 204
  • fetch after delete returned 404 ErrorItemNotFound
• Verified the next 30 days on the new calendar are empty after the smoke test.
• Applied calendar-folder permissions:
  • Sam Aguiar: Editor
  • Janelle Aguiar: Editor
  • Jenni Hubbard: Editor
  • Kyle Medlin: Reviewer
  • Default: AvailabilityOnly
  • Anonymous: None
• Ran Graph/Entra audit probe. Entra directory audit rows were accessible. Purview audit query endpoint returned 400 BadRequest: Resource not found for the segment 'auditLog', so Exchange/Purview audit search is not available through this app-only Graph path as currently exposed.
• Created local notes and evidence in admin/outlook-audits/sail-away-calendar-migration-20260603/.

Live systems changed

Microsoft 365 / Exchange Online was changed. A new shared mailbox was created and calendar permissions were granted. No Salesforce records were changed. No production Outlook PTO events were migrated or created. The smoke-test event was deleted immediately and verified gone.

Evidence files

• SAIL-AWAY-shared-mailbox-created-2026-06-04.md
• ROLLBACK-SAIL-AWAY-shared-mailbox-2026-06-04.md
• create_sail_away_shared_mailbox.ps1
• create-sail-away-shared-mailbox-2026-06-04.json
• sail-away-graph-post-create-check-2026-06-04.json