# 403 Forbidden error when calling Delete User API

**URL:** <https://devforum.zoom.us/t/403-forbidden-error-when-calling-delete-user-api/22266>\
**Category:** API and Webhooks\
**Created:** [June 24, 2020, 8:30pm UTC](https://devforum.zoom.us/t/403-forbidden-error-when-calling-delete-user-api/22266 "2020-06-24T20:30:15Z")\
**Posts on this page:** 7\
**Page:** 1

<div class="post-metadata">

**Author:** ![matthew.schmitt](https://sea2.discourse-cdn.com/flex016/user_avatar/devforum.zoom.us/matthew.schmitt/32/10701_2.png) [@matthew.schmitt](https://devforum.zoom.us/u/matthew.schmitt)\
**Post date:** [June 24, 2020, 8:30pm UTC](https://devforum.zoom.us/t/403-forbidden-error-when-calling-delete-user-api/22266/1 "2020-06-24T20:30:15Z")

</div>

**Description**  
Hello, I have been working within Okta Workflow to call the Zoom Delete User API whenever a user is deactivated in Okta to delete the Zoom user account and transfer the meeting/recordings to an archive user account we have created in Zoom. The account I made the Zoom connection with has all the permissions possible within Zoom.

I have attached screenshots below showing the error. I tried attaching a document with the entire 403 Error and was not able to.

**Error**  
403 Forbidden

**Which App Type (OAuth / Chatbot / JWT / Webhook)?**  
In Okta, I have created a connection to Zoom through a Custom API card in Okta Workflow. I have tried using a JWT Token header and tried without (screenshots will be without, same error though). The JWT token was not expired wither from the app I created in Zoom.

**Screenshots (If applicable)**

 ![Screen Shot 2020-06-23 at 10.58.56 AM](https://us1.discourse-cdn.com/flex016/uploads/zoomdeveloper/original/2X/6/63dc00f0729d42ea27b85ae141f82f9e7708940b.png)

---

<div class="post-metadata">

**Author:** ![tommy](https://sea2.discourse-cdn.com/flex016/user_avatar/devforum.zoom.us/tommy/32/72769_2.png) [@tommy](https://devforum.zoom.us/u/tommy)\
**Post date:** [June 25, 2020, 9:54pm UTC](https://devforum.zoom.us/t/403-forbidden-error-when-calling-delete-user-api/22266/2 "2020-06-25T21:54:44Z")

</div>

Hey @matthew.schmitt,

How are you setting the header? Also make sure you are sending a [DELETE request](https://marketplace.zoom.us/docs/api-reference/zoom-api/users/userdelete). Usually a 403 means there is something wrong with the method or request URL.

Thanks,  
Tommy

---

<div class="post-metadata">

**Author:** ![matthew.schmitt](https://sea2.discourse-cdn.com/flex016/user_avatar/devforum.zoom.us/matthew.schmitt/32/10701_2.png) [@matthew.schmitt](https://devforum.zoom.us/u/matthew.schmitt)\
**Post date:** [June 26, 2020, 12:14pm UTC](https://devforum.zoom.us/t/403-forbidden-error-when-calling-delete-user-api/22266/3 "2020-06-26T12:14:04Z")

</div>

Hi @tommy,

I am setting the Header as:  
{  
“Authorization”:“Bearer xxxxxxxxxxxxxx”  
}

Obviously the Xs are where the token would go.

The request URL I am using is this:  
[https://api.zoom.us/v2/users/[UserID]?&transfer\_email=[EmailAddress]&transfer\_meeting=true&transfer\_webinar=false&transfer\_recording=true](https://api.zoom.us/v2/users/%5BUserID%5D?&transfer_email=%5BEmailAddress%5D&transfer_meeting=true&transfer_webinar=false&transfer_recording=true)

I have confirmed the request is a DELETE request as well.

Thanks,  
Matt

---

<div class="post-metadata">

**Author:** ![tommy](https://sea2.discourse-cdn.com/flex016/user_avatar/devforum.zoom.us/tommy/32/72769_2.png) [@tommy](https://devforum.zoom.us/u/tommy)\
**Post date:** [June 29, 2020, 8:25pm UTC](https://devforum.zoom.us/t/403-forbidden-error-when-calling-delete-user-api/22266/4 "2020-06-29T20:25:47Z")

</div>

Hey @matthew.schmitt,

Is the transfer\_email value an email in your Zoom account?

Thanks  
Tommy

---

<div class="post-metadata">

**Author:** ![matthew.schmitt](https://sea2.discourse-cdn.com/flex016/user_avatar/devforum.zoom.us/matthew.schmitt/32/10701_2.png) [@matthew.schmitt](https://devforum.zoom.us/u/matthew.schmitt)\
**Post date:** [June 30, 2020, 12:16pm UTC](https://devforum.zoom.us/t/403-forbidden-error-when-calling-delete-user-api/22266/5 "2020-06-30T12:16:50Z")

</div>

@tommy,

Yes, the transfer email account is in our Zoom tenant as an account.  
I am doing this testing in a sub-account. Could that possibly have anything to do with this?  
All the accounts I am using are on the sub-account and have the correct permissions.

Thanks,  
Matt

---

<div class="post-metadata">

**Author:** ![tommy](https://sea2.discourse-cdn.com/flex016/user_avatar/devforum.zoom.us/tommy/32/72769_2.png) [@tommy](https://devforum.zoom.us/u/tommy)\
**Post date:** [July 2, 2020, 12:05am UTC](https://devforum.zoom.us/t/403-forbidden-error-when-calling-delete-user-api/22266/6 "2020-07-02T00:05:21Z")

</div>

Hey @matthew.schmitt,

That is strange. Can you send the full request url and your access\_token to [developersupport@zoom.us](mailto:developersupport@zoom.us) so we can debug?

Thanks,  
Tommy

---

<div class="post-metadata">

**Author:** ![DeveloperBot](https://sea2.discourse-cdn.com/flex016/user_avatar/devforum.zoom.us/developerbot/32/12632_2.png) [@DeveloperBot](https://devforum.zoom.us/u/DeveloperBot)\
**Post date:** [August 21, 2020, 10:32pm UTC](https://devforum.zoom.us/t/403-forbidden-error-when-calling-delete-user-api/22266/7 "2020-08-21T22:32:49Z")

</div>

Closed on August 21, 2020, 10:32pm UTC


