# Account-level vs user-level oauth app

**URL:** <https://devforum.zoom.us/t/account-level-vs-user-level-oauth-app/80950>\
**Category:** Authentication\
**Created:** [January 3, 2023, 2:50pm UTC](https://devforum.zoom.us/t/account-level-vs-user-level-oauth-app/80950 "2023-01-03T14:50:10Z")\
**Posts on this page:** 5\
**Page:** 1

<div class="post-metadata">

**Author:** ![bmartin](https://avatars.discourse-cdn.com/v4/letter/b/e274bd/32.png) [@bmartin](https://devforum.zoom.us/u/bmartin)\
**Post date:** [January 3, 2023, 2:50pm UTC](https://devforum.zoom.us/t/account-level-vs-user-level-oauth-app/80950/1 "2023-01-03T14:50:10Z")

</div>

I want to allow the individual users in my web application to be able to create new scheduled meetings whenever they want from within my web application.

Which oauth app should I use in this case? Account-level or user-level? It is really confusing.

---

<div class="post-metadata">

**Author:** ![freelancer.nak](https://sea2.discourse-cdn.com/flex016/user_avatar/devforum.zoom.us/freelancer.nak/32/40968_2.png) [@freelancer.nak](https://devforum.zoom.us/u/freelancer.nak)\
**Post date:** [January 3, 2023, 3:23pm UTC](https://devforum.zoom.us/t/account-level-vs-user-level-oauth-app/80950/2 "2023-01-03T15:23:54Z")

</div>

@bmartin Hope you will be fine. For individual users select user-level.

---

<div class="post-metadata">

**Author:** ![bmartin](https://avatars.discourse-cdn.com/v4/letter/b/e274bd/32.png) [@bmartin](https://devforum.zoom.us/u/bmartin)\
**Post date:** [January 4, 2023, 6:36pm UTC](https://devforum.zoom.us/t/account-level-vs-user-level-oauth-app/80950/3 "2023-01-04T18:36:04Z")

</div>

I have another question. Users under the same account would need to authorize the app individually if it’s a user-managed app. If it’s an account-level app, then an admin or owner could authorize an app on behalf of all users under the account.

In the user-managed app, we use the access token of that user who authorized the app. But in the account-level app, do we use the admin’s access token only? If admin “Alex” authorized the app on behalf all users under the account, and then a user “John” who is not the admin of the account, wants to create a new meeting, do we use Alex’s tokens or John’s tokens? How do we get John’s if the app has already been authorized by Alex?

---

<div class="post-metadata">

**Author:** ![freelancer.nak](https://sea2.discourse-cdn.com/flex016/user_avatar/devforum.zoom.us/freelancer.nak/32/40968_2.png) [@freelancer.nak](https://devforum.zoom.us/u/freelancer.nak)\
**Post date:** [January 5, 2023, 7:36am UTC](https://devforum.zoom.us/t/account-level-vs-user-level-oauth-app/80950/4 "2023-01-05T07:36:07Z")

</div>

@bmartin, You need to set John’s email or userId to meeting create endpoint → `/users/{JohnUserId or JohnEmail}/meetings`.

---

<div class="post-metadata">

**Author:** ![attentiontag](https://sea2.discourse-cdn.com/flex016/user_avatar/devforum.zoom.us/attentiontag/32/50828_2.png) [@attentiontag](https://devforum.zoom.us/u/attentiontag)\
**Post date:** [June 3, 2025, 3:50am UTC](https://devforum.zoom.us/t/account-level-vs-user-level-oauth-app/80950/5 "2025-06-03T03:50:16Z")

</div>

> [@freelancer.nak](#):
>
> JohnUserId or JohnEmai

Thanks - just to add to @bmartin question - to access the end point to create meeting on John’s account, do we use the admin Alex’s token? Or something else? cc: @Abu