Perfect just what I was looking for; thanks for sharing your knowledge. I've already spent time looking but this has saved me hours of work searching for the solution.
I did this in order to allow to get event on only one users calender events using MSAL token & microsoft graph.... the access policy seems like working if i test it in exchange online wia test-applicationaccesspolicy...however, if i use the msal application token to access other users calenders, i get their events aswell.
