Hello Marc,
students can cancel their booking, regardless of permissions. However, they cannot do so "at any time". In the Scheduler settings page, you can configure a "guard time". If this is set to, say, 4 hours, then students can cancel (or change) their booking only until 4 hours before their slot begins.