# Account-Level OAuth App to Authenticate Non-Admin Users

**URL:** <https://devforum.zoom.us/t/account-level-oauth-app-to-authenticate-non-admin-users/14351>\
**Category:** App Marketplace\
**Created:** [April 22, 2020, 3:10am UTC](https://devforum.zoom.us/t/account-level-oauth-app-to-authenticate-non-admin-users/14351 "2020-04-22T03:10:22Z")\
**Posts on this page:** 5\
**Page:** 1

<div class="post-metadata">

**Author:** ![martin.laritz](https://sea2.discourse-cdn.com/flex016/user_avatar/devforum.zoom.us/martin.laritz/32/6680_2.png) [@martin.laritz](https://devforum.zoom.us/u/martin.laritz)\
**Post date:** [April 22, 2020, 3:10am UTC](https://devforum.zoom.us/t/account-level-oauth-app-to-authenticate-non-admin-users/14351/1 "2020-04-22T03:10:23Z")

</div>

**Description**  
I am creating an app that an admin would approve to give me access to the account’s data … mostly just all the users within the account, and any current meetings.

I would also like to use Zoom OAuth to authenticate users, so they can use my website to view the other users in their account.

For this, I’ve setup an account-level OAuth app to retrieve the account level data.

**Error**  
The account-level OAuth app does not work for OAuth to authenticate users. All non-admin users who try to install the app get a permission denied error because they are not admins on the account.

Is there a way to authenticate the non-admin users using an account-level OAuth app? Or is there a way to have the account-level app automatically approved for non-admin users?

---

<div class="post-metadata">

**Author:** ![tommy](https://sea2.discourse-cdn.com/flex016/user_avatar/devforum.zoom.us/tommy/32/72769_2.png) [@tommy](https://devforum.zoom.us/u/tommy)\
**Post date:** [April 22, 2020, 4:43pm UTC](https://devforum.zoom.us/t/account-level-oauth-app-to-authenticate-non-admin-users/14351/2 "2020-04-22T16:43:26Z")

</div>

Hey @martin.laritz,

You are talking about two different flows here, so you will need two different OAuth apps.

1. Account Level OAuth app for admins to authorize your use of their data.

2. User Level OAuth App for each Zoom user to OAuth on your website.

Thanks,  
Tommy

---

<div class="post-metadata">

**Author:** ![martin.laritz](https://sea2.discourse-cdn.com/flex016/user_avatar/devforum.zoom.us/martin.laritz/32/6680_2.png) [@martin.laritz](https://devforum.zoom.us/u/martin.laritz)\
**Post date:** [April 22, 2020, 5:07pm UTC](https://devforum.zoom.us/t/account-level-oauth-app-to-authenticate-non-admin-users/14351/3 "2020-04-22T17:07:30Z")

</div>

Thanks @tommy !

That’s exactly how we submitted the apps, 2 different: one account-level for backend, and one user-level for authentication and reading the user data (to validate their accounts have access).

Our last review was rejected because we had the 2 apps, and they told us to consolidate them into 1 app, but I’ve not been able to figure out how. Any tips on how I can get both of these published?

Thanks again!

---

<div class="post-metadata">

**Author:** ![tommy](https://sea2.discourse-cdn.com/flex016/user_avatar/devforum.zoom.us/tommy/32/72769_2.png) [@tommy](https://devforum.zoom.us/u/tommy)\
**Post date:** [April 23, 2020, 4:30pm UTC](https://devforum.zoom.us/t/account-level-oauth-app-to-authenticate-non-admin-users/14351/4 "2020-04-23T16:30:39Z")

</div>

Hey @martin.laritz,

Is it possible to redesign your flow so you only use one type of OAuth app?

If you want each individual user to be able to connect their Zoom accounts to your app, I would suggest using a User Level OAuth App.

Thanks,  
Tommy

---

<div class="post-metadata">

**Author:** ![DeveloperBot](https://sea2.discourse-cdn.com/flex016/user_avatar/devforum.zoom.us/developerbot/32/12632_2.png) [@DeveloperBot](https://devforum.zoom.us/u/DeveloperBot)\
**Post date:** [August 21, 2020, 8:54pm UTC](https://devforum.zoom.us/t/account-level-oauth-app-to-authenticate-non-admin-users/14351/5 "2020-08-21T20:54:19Z")

</div>

Closed on August 21, 2020, 8:54pm UTC


