# Access-Control Lists/Permissions for all objects **URL:** \ **Category:** API and Webhooks\ **Created:** [April 16, 2020, 1:06pm UTC](https://devforum.zoom.us/t/access-control-lists-permissions-for-all-objects/13500 "2020-04-16T13:06:48Z")\ **Posts on this page:** 7\ **Page:** 1
**Author:** ![mads.ohm](https://sea2.discourse-cdn.com/flex016/user_avatar/devforum.zoom.us/mads.ohm/32/6267_2.png) [@mads.ohm](https://devforum.zoom.us/u/mads.ohm)\ **Post date:** [April 16, 2020, 1:06pm UTC](https://devforum.zoom.us/t/access-control-lists-permissions-for-all-objects/13500/1 "2020-04-16T13:06:48Z")
If I, as an account owner, fetch say all cloud recordings via the API by looping over all users and using the `/users/{userId}/recordings` endpoint, can I somehow see who of my users has access to these recordings? I guess a recording can be found in `/users/1/recording` but user `2` also has access. The same question goes for other objects too such as, for example, `meetings`. ---
**Author:** ![shrijana.g](https://sea2.discourse-cdn.com/flex016/user_avatar/devforum.zoom.us/shrijana.g/32/605_2.png) [@shrijana.g](https://devforum.zoom.us/u/shrijana.g)\ **Post date:** [April 17, 2020, 2:37am UTC](https://devforum.zoom.us/t/access-control-lists-permissions-for-all-objects/13500/2 "2020-04-17T02:37:54Z")
The other users except for the account owner who would be able to access these recordings are the host of that meeting/ admin of your account. If you have assigned a user with “Recording:Edit”, “Recording:Read” permissions, they will be able to access it as well. You can view permissions of a user using [Get User Permissions](https://marketplace.zoom.us/docs/api-reference/zoom-api/users/userpermission) API. Thanks, Shrijana ---
**Author:** ![mads.ohm](https://sea2.discourse-cdn.com/flex016/user_avatar/devforum.zoom.us/mads.ohm/32/6267_2.png) [@mads.ohm](https://devforum.zoom.us/u/mads.ohm)\ **Post date:** [April 17, 2020, 6:30am UTC](https://devforum.zoom.us/t/access-control-lists-permissions-for-all-objects/13500/3 "2020-04-17T06:30:29Z")
Thanks Shrijana So with this `Recording:Read` permission am I to understand that with it, you have access to _all_ recordings? There is no per recording permissions? Do normal users regularly have this permission applied? I guess if they don’t, they’ll only be able to see their own recordings? ---
**Author:** ![shrijana.g](https://sea2.discourse-cdn.com/flex016/user_avatar/devforum.zoom.us/shrijana.g/32/605_2.png) [@shrijana.g](https://devforum.zoom.us/u/shrijana.g)\ **Post date:** [April 18, 2020, 4:46am UTC](https://devforum.zoom.us/t/access-control-lists-permissions-for-all-objects/13500/4 "2020-04-18T04:46:31Z")
Hi @mads.ohm yes, if the user in the account has been assigned this [permission](https://support.zoom.us/hc/en-us/articles/115001078646-Role-Based-Access-Control), they have access to it. This permission doesn’t come by default for all users (only meeting hosts, admin, users assigned with that permission) can have it. You can learn more about managing cloud recordings [here](https://support.zoom.us/hc/en-us/articles/205347605). If you are sharing the recording publicly, anyone can view it. You can add further restrictions to the recording by using [authentication profiles](https://support.zoom.us/hc/en-us/articles/360037756671-Authentication-Profiles-for-Cloud-Recordings). Best, Shrijana ---
**Author:** ![mads.ohm](https://sea2.discourse-cdn.com/flex016/user_avatar/devforum.zoom.us/mads.ohm/32/6267_2.png) [@mads.ohm](https://devforum.zoom.us/u/mads.ohm)\ **Post date:** [April 20, 2020, 8:02am UTC](https://devforum.zoom.us/t/access-control-lists-permissions-for-all-objects/13500/5 "2020-04-20T08:02:52Z")
Just to be clear: Using the API as an account owner, I can’t see which users have access to which recordings. Is that correct? All of the things in the links you show is to do with individual people being logged into [Zoom.us](http://Zoom.us). What I’m trying to accomplish is much the same, but away from the [Zoom.us](http://Zoom.us) UI. I want to list all the recordings, with a super-user API access, but still have the ability to see which users should have access to which recordings. I don’t think that it possible via the API, am I right? ---
**Author:** ![tommy](https://sea2.discourse-cdn.com/flex016/user_avatar/devforum.zoom.us/tommy/32/72769_2.png) [@tommy](https://devforum.zoom.us/u/tommy)\ **Post date:** [April 21, 2020, 7:16am UTC](https://devforum.zoom.us/t/access-control-lists-permissions-for-all-objects/13500/6 "2020-04-21T07:16:34Z")
Hey @mads.ohm, > [@mads.ohm](#): > > Using the API as an account owner, I can’t see which users have access to which recordings. Is that correct? As the account owner, you can access your users recordings: [https://marketplace.zoom.us/docs/api-reference/zoom-api/cloud-recording/getaccountcloudrecording](https://marketplace.zoom.us/docs/api-reference/zoom-api/cloud-recording/getaccountcloudrecording) You’d want to implement custom logic on your end to limit which users can access which webianrs. If you use a [User Level OAuth app](https://marketplace.zoom.us/docs/guides/getting-started/app-types/create-oauth-app), you can [limit the users access to only their recordings.](https://marketplace.zoom.us/docs/api-reference/zoom-api/cloud-recording/recordingslist) Thanks, Tommy ---
**Author:** ![DeveloperBot](https://sea2.discourse-cdn.com/flex016/user_avatar/devforum.zoom.us/developerbot/32/12632_2.png) [@DeveloperBot](https://devforum.zoom.us/u/DeveloperBot)\ **Post date:** [August 21, 2020, 8:51pm UTC](https://devforum.zoom.us/t/access-control-lists-permissions-for-all-objects/13500/7 "2020-08-21T20:51:29Z")