# Admin can't see Scopes

**URL:** <https://devforum.zoom.us/t/admin-cant-see-scopes/95961>\
**Category:** Reports and Dashboards\
**Created:** [September 28, 2023, 1:29pm UTC](https://devforum.zoom.us/t/admin-cant-see-scopes/95961 "2023-09-28T13:29:43Z")\
**Posts on this page:** 4\
**Page:** 1

<div class="post-metadata">

**Author:** ![university](https://sea2.discourse-cdn.com/flex016/user_avatar/devforum.zoom.us/university/32/22426_2.png) [@university](https://devforum.zoom.us/u/university)\
**Post date:** [September 28, 2023, 1:29pm UTC](https://devforum.zoom.us/t/admin-cant-see-scopes/95961/1 "2023-09-28T13:29:43Z")

</div>

**API Endpoint(s) and/or Zoom API Event(s)**

1. [Meeting Participants Report endpoint](https://developers.zoom.us/docs/api/rest/reference/zoom-api/methods/#operation/reportMeetingParticipants)
2. [Webinar Participants Report endpoint](https://developers.zoom.us/docs/api/rest/reference/zoom-api/methods/#operation/reportWebinarParticipants)
3. [Get User settings endpoint](https://developers.zoom.us/docs/api/rest/reference/zoom-api/methods/#operation/userSettings)

**Description**  
The admin of the Zoom account states that can’t view all the scopes necessary to allow our app to request the REST API endpoints related to the webinar/meetings participants report and the User settings.  
The admin already configured other type of scopes that are necessary to our app (for instance “meeting:read:admin” and “webinar:write:admin” scopes) but states that does not view the other scopes.  
The other scopes necessary are:

1. user:read:admin
2. user:write:admin
3. report:read:admin

As seen in other [topics](https://devforum.zoom.us/t/marketplace-where-are-the-scopes-reportadmin-zmsread/28016), I know that we need an “Account Level” app and I can confirm that we already have that requirement as you can see in the following image.  
 ![Screenshot 2023-09-28 131822](https://us1.discourse-cdn.com/flex016/uploads/zoomdeveloper/original/3X/2/d/2d28f18d3bb943135293c8306a7489bc7b73d74d.png)

I have also seen that we must have a business account and we have already met this requirement.  
(the image is portuguese, sorry)  
 ![Screenshot 2023-09-28 1419208](https://us1.discourse-cdn.com/flex016/uploads/zoomdeveloper/original/3X/5/a/5a3e35a8b9c0e3f0c04eaa1aef26a285e2d9918c.png)

Can you help me understand if this is a Zoom’s problem or if the admin is not doing something correctly?

**Error?**  
The errors I get by requesting the previously defined endpoints defined are all related to the scopes that are not defined in the Server-to-Server app created:

```auto
{
	"code": 4700,
	"message": "Invalid access token, does not contain scopes: [report:read:admin]."
}

```

and

```auto
{
	"code": 4700,
	"message": "Invalid access token, does not contain scopes: [user:write:admin, user:read:admin, user:read, user:write]."
}

```

---

<div class="post-metadata">

**Author:** ![elisa.zoom](https://sea2.discourse-cdn.com/flex016/user_avatar/devforum.zoom.us/elisa.zoom/32/47836_2.png) [@elisa.zoom](https://devforum.zoom.us/u/elisa.zoom)\
**Post date:** [September 29, 2023, 6:17pm UTC](https://devforum.zoom.us/t/admin-cant-see-scopes/95961/2 "2023-09-29T18:17:57Z")

</div>

Hi @university  
thanks for reaching out to us!  
Could you please confirm that when you generate your access token, you are getting those scopes back in the list of scopes that get returned in your request?

Also make sure that those scopes are added in the Server to Server Oauth app please

---

<div class="post-metadata">

**Author:** ![university](https://sea2.discourse-cdn.com/flex016/user_avatar/devforum.zoom.us/university/32/22426_2.png) [@university](https://devforum.zoom.us/u/university)\
**Post date:** [October 2, 2023, 8:44am UTC](https://devforum.zoom.us/t/admin-cant-see-scopes/95961/3 "2023-10-02T08:44:58Z")

</div>

Hi @elisa.zoom,  
Thank you for your response!

> [@elisa.zoom](#):
>
> Could you please confirm that when you generate your access token, you are getting those scopes back in the list of scopes that get returned in your request?

When I generate the access token these are the scopes that are returned in the response:  
 ![scopes](https://us1.discourse-cdn.com/flex016/uploads/zoomdeveloper/original/3X/c/b/cbab123f92695edf362d7c70e8980b290afee828.png)

> [@elisa.zoom](#):
>
> Also make sure that those scopes are added in the Server to Server Oauth app please

I can’t confirm this topic because I don’t have access to the administration account of Zoom. The problem is that the admin of the account states that does not have any more scopes than the currently selected and shown in the image. Are you able to confirm that?

---

<div class="post-metadata">

**Author:** ![elisa.zoom](https://sea2.discourse-cdn.com/flex016/user_avatar/devforum.zoom.us/elisa.zoom/32/47836_2.png) [@elisa.zoom](https://devforum.zoom.us/u/elisa.zoom)\
**Post date:** [October 2, 2023, 2:15pm UTC](https://devforum.zoom.us/t/admin-cant-see-scopes/95961/4 "2023-10-02T14:15:53Z")

</div>

It looks like the app that you are using to generate the access\_token, does not contain report or admin scopes @university  
You can share the following post with the Admin so they can enable the proper permissions for the role that is creating the App so they will be able to see the scopes they need.

> [@How to user Server-to-Sever OAuth app with Postman](https://devforum.zoom.us/t/how-to-user-server-to-sever-oauth-app-with-postman/70848):
>
> How to use our Server-to-Server OAuth with Postman? As some of you might be aware of, our JWT app is being deprecated by June 2023 and we encourage you to migrate to the newly introduced [Server-to-Server OAuth App](https://marketplace.zoom.us/docs/guides/build/server-to-server-oauth-app) That being said, here is a quick and simple guide on how to use or new app with Postman As stated in our documentation here: This new app type facilitates OAuth-authenticated requests between servers without end-user involvement. And this grant type enable your private server a…
