# API endpoint for List audio items gives 403 response

**URL:** <https://devforum.zoom.us/t/api-endpoint-for-list-audio-items-gives-403-response/142244>\
**Category:** API and Webhooks\
**Tags:** api\
**Created:** [March 2, 2026, 6:39pm UTC](https://devforum.zoom.us/t/api-endpoint-for-list-audio-items-gives-403-response/142244 "2026-03-02T18:39:33Z")\
**Posts on this page:** 3\
**Page:** 1

<div class="post-metadata">

**Author:** ![mwmatter](https://sea2.discourse-cdn.com/flex016/user_avatar/devforum.zoom.us/mwmatter/32/73811_2.png) [@mwmatter](https://devforum.zoom.us/u/mwmatter)\
**Post date:** [March 2, 2026, 6:39pm UTC](https://devforum.zoom.us/t/api-endpoint-for-list-audio-items-gives-403-response/142244/1 "2026-03-02T18:39:33Z")

</div>

### **API Endpoint(s) and/or Zoom API Event(s)**

/v2/phone/users/\<user\_id\>/audios

**Description**  
_I am trying to get a list of Audio Items from a given user’s account using a server-to-server application with the correct scopes to see that information but getting an error response._

**Error?**  
{  
“code”: 403,  
“message”: “You do not have permission.”  
}

**How To Reproduce**

1. _Create a server-to-server application_

2. Set the scopes to: `phone:read:list_audios`,`phone:read:list_audios:admin`

3. Try using this endpoint to get a users audio recordings: /v2/phone/users/\<user\_id\>/audios

4. Response is 403 error.

Other forum posts have noted similar issues and some sort of special whitelisting of a users account was required in the past. I’d like the full post but I guess I can’t with my account: /t/zoom-phone-api-audios-endpoint-issues/88406

---

<div class="post-metadata">

**Author:** ![amanda-recallai](https://sea2.discourse-cdn.com/flex016/user_avatar/devforum.zoom.us/amanda-recallai/32/44747_2.png) [@amanda-recallai](https://devforum.zoom.us/u/amanda-recallai)\
**Post date:** [March 3, 2026, 5:39pm UTC](https://devforum.zoom.us/t/api-endpoint-for-list-audio-items-gives-403-response/142244/3 "2026-03-03T17:39:17Z")

</div>

That `GET /v2/phone/users/{userId}/audios` [call returns _personal_ audio items](https://www.postman.com/zoom-developer/zoom-public-workspace/request/uk18mai/list-audio-items), so it will 403 unless you’re calling as the same user (`userId=me`) or as an admin context that can access that user’s Phone data

For a Server-to-Server OAuth app, make sure the app is installed at the **account level by an admin** and your token actually includes the **admin granular scope** (`phone:read:list_audios:admin`) for this endpoint: [https://developers.zoom.us/docs/integrations/oauth-scopes-granular/](https://developers.zoom.us/docs/integrations/oauth-scopes-granular/)

If scopes/installation are correct, the other common reason is **account entitlement** : Zoom Phone must be enabled and the target user must have a Zoom Phone license ([the endpoint doc](https://www.postman.com/zoom-developer/zoom-public-workspace/request/uk18mai/list-audio-items) lists these prerequisites)

---

<div class="post-metadata">

**Author:** ![mwmatter](https://sea2.discourse-cdn.com/flex016/user_avatar/devforum.zoom.us/mwmatter/32/73811_2.png) [@mwmatter](https://devforum.zoom.us/u/mwmatter)\
**Post date:** [March 3, 2026, 6:02pm UTC](https://devforum.zoom.us/t/api-endpoint-for-list-audio-items-gives-403-response/142244/4 "2026-03-03T18:02:22Z")

</div>

Thanks for the replies. I’ve confirmed my app is installed by an admin (I am the admin). It is a server to server oath app with the “phone:read:list\_audios:admin” scope. I’ve given my app all phone and user scopes in fact to see if that would help.

As far as the account entitlement my user has this license: **Zoom Workplace Business Plus with US/CA Unlimited** which best I can tell should be the correct license.

So it would seem to me I have all the prerequisites met.