# BUG: Bot App & Event Subscription for user always sets scope to chat\_message:read:admin **URL:** \ **Category:** API and Webhooks\ **Created:** [September 22, 2020, 5:36pm UTC](https://devforum.zoom.us/t/bug-bot-app-event-subscription-for-user-always-sets-scope-to-chat-messageadmin/31009 "2020-09-22T17:36:24Z")\ **Posts on this page:** 7\ **Page:** 1
**Author:** ![attock](https://avatars.discourse-cdn.com/v4/letter/a/48db29/32.png) [@attock](https://devforum.zoom.us/u/attock)\ **Post date:** [September 22, 2020, 5:36pm UTC](https://devforum.zoom.us/t/bug-bot-app-event-subscription-for-user-always-sets-scope-to-chat-messageadmin/31009/1 "2020-09-22T17:36:24Z")
**Description** When we create a bot app event subscription we are given two options: - All users in account - Only users installed the app **Expected** You would except that the scopes for them would be different: - **chat\_message:read:admin** for `All users in account` - **chat\_message:read** for `Only users installed the app` **Error** However in both of above cases it sets the scope to **chat\_message:read:admin** which is a bug. **End Result** The end result is that a normal user cannot install the app then because of (incorrectly) assigned admin scopes: ![image](https://us1.discourse-cdn.com/flex016/uploads/zoomdeveloper/original/2X/e/eea30ad89b9fff17935efa6eb0ed6baf8f833713.png) ---
**Author:** ![DeveloperBot](https://sea2.discourse-cdn.com/flex016/user_avatar/devforum.zoom.us/developerbot/32/12632_2.png) [@DeveloperBot](https://devforum.zoom.us/u/DeveloperBot)\ **Post date:** [September 22, 2020, 5:36pm UTC](https://devforum.zoom.us/t/bug-bot-app-event-subscription-for-user-always-sets-scope-to-chat-messageadmin/31009/2 "2020-09-22T17:36:29Z")
Hey @attock Thanks for posting on the Zoom Devforum! I am still learning, but I will try my best to help answer your question. 🙂 Checkout this related thread that may have the answer you are looking for: > [@oAuth App Scopes](https://devforum.zoom.us/t/-/1476): > > Hi - I’m in what appears to be a catch-22 situation. I understand JWT is being phased out, so I am trying to build my integration between Salesforce and Zoom webinar functionality using oAuth. However, in order to create a webinar, it appears I need the webinar:write:admin scope, but it also appears that I cannot set this scope for an oAuth app. One workaround I found is to start building a marketplace app, which allows for scopes to be set, but just never publish/submit the app. My question i… If this thread did not help, please let us know by replying back here and someone from the Developer Relations team will get back to you shortly. Thanks, DeveloperBot ---
**Author:** ![attock](https://avatars.discourse-cdn.com/v4/letter/a/48db29/32.png) [@attock](https://devforum.zoom.us/u/attock)\ **Post date:** [September 22, 2020, 5:49pm UTC](https://devforum.zoom.us/t/bug-bot-app-event-subscription-for-user-always-sets-scope-to-chat-messageadmin/31009/3 "2020-09-22T17:49:06Z")
Not really. Is this a search bot? > [@DeveloperBot](#): > > If this thread did not help, please let us know by replying back here and someone from the Developer Relations team will get back to you shortly. ---
**Author:** ![tommy](https://sea2.discourse-cdn.com/flex016/user_avatar/devforum.zoom.us/tommy/32/72769_2.png) [@tommy](https://devforum.zoom.us/u/tommy)\ **Post date:** [September 24, 2020, 4:29pm UTC](https://devforum.zoom.us/t/bug-bot-app-event-subscription-for-user-always-sets-scope-to-chat-messageadmin/31009/4 "2020-09-24T16:29:37Z")
Hey @attock, Since Chatbot Apps are Account Level, you cannot add the `chat_message:read` scope. > [@attock](#): > > When we create a bot app event subscription we are given two options: > > - All users in account > - Only users installed the app Setting either of these webhook options does not affect the scopes of the app, but setting which specific webhooks you want to subscribe to does. Thanks, Tommy ---
**Author:** ![attock](https://avatars.discourse-cdn.com/v4/letter/a/48db29/32.png) [@attock](https://devforum.zoom.us/u/attock)\ **Post date:** [September 25, 2020, 5:52am UTC](https://devforum.zoom.us/t/bug-bot-app-event-subscription-for-user-always-sets-scope-to-chat-messageadmin/31009/5 "2020-09-25T05:52:06Z")
Thanks for responding, to clarify the following is true: 1. Since chat bots are account level, only admins can install the bots Other questions: 2. What impact if any `All users in account` & `Only users installed the app` has on the apps? 3. Is there any way for a non-admin to install a chat bot at all and only receive chat messages for the user that installed the app? ---
**Author:** ![tommy](https://sea2.discourse-cdn.com/flex016/user_avatar/devforum.zoom.us/tommy/32/72769_2.png) [@tommy](https://devforum.zoom.us/u/tommy)\ **Post date:** [September 26, 2020, 7:40am UTC](https://devforum.zoom.us/t/bug-bot-app-event-subscription-for-user-always-sets-scope-to-chat-messageadmin/31009/6 "2020-09-26T07:40:21Z")
Hey @attock, > [@attock](#): > > What impact if any `All users in account` & `Only users installed the app` has on the apps? Good question, this will trigger the respective webhook notification for either all users on the Zoom Account with the Chatbot App installed, or just for the user who installed the app. > [@attock](#): > > Is there any way for a non-admin to install a chat bot at all and only receive chat messages for the user that installed the app? Either an Admin, or a user who has the respective [account permissions](https://support.zoom.us/hc/en-us/articles/115001078646-Using-role-management) can install the Chatbot app. Once the Chatbot is installed, you can simply only [send Chat Messages](https://marketplace.zoom.us/docs/guides/chatbots/send-edit-and-delete-messages) to the person you choose. Does that answer your questions? Thanks, Tommy ---
**Author:** ![system](https://us1.discourse-cdn.com/flex016/uploads/zoomdeveloper/original/3X/6/1/614bdd549b610bbaa46ff934617683a02bdaa03c.png) [@system](https://devforum.zoom.us/u/system)\ **Post date:** [October 26, 2020, 5:40pm UTC](https://devforum.zoom.us/t/bug-bot-app-event-subscription-for-user-always-sets-scope-to-chat-messageadmin/31009/7 "2020-10-26T17:40:31Z")
Closed on October 26, 2020, 5:40pm UTC This topic was automatically closed 30 days after the last reply. New replies are no longer allowed.