# Call Control Call Command Returns Forbidden

**URL:** <https://devforum.zoom.us/t/call-control-call-command-returns-forbidden/129887>\
**Category:** API and Webhooks\
**Created:** [March 14, 2025, 1:06pm UTC](https://devforum.zoom.us/t/call-control-call-command-returns-forbidden/129887 "2025-03-14T13:06:31Z")\
**Posts on this page:** 5\
**Page:** 1

<div class="post-metadata">

**Author:** ![gschally](https://avatars.discourse-cdn.com/v4/letter/g/6a8cbe/32.png) [@gschally](https://devforum.zoom.us/u/gschally)\
**Post date:** [March 14, 2025, 1:06pm UTC](https://devforum.zoom.us/t/call-control-call-command-returns-forbidden/129887/1 "2025-03-14T13:06:31Z")

</div>

We had previously developed a successful integration using OAUTH2 which included call control using the Zoom Beta API with phone control. We tried to implement this for a new client, and the changes to the App Marketplace required us to convert our app to Server to Server OAUTH. When we try to hit our call control endpoints, we are getting 403 Permission Denied.

Endpoint:  
[https://api.zoom.us/v2/phone/users/](https://api.zoom.us/v2/phone/users/){{userId inserted here}}/call\_commands

Posted data:  
{“command”:“end\_call”,“params”:{“call\_id”:“7481644012440929298”,“device\_id”:“284b4b778dda6a2c90ccfc959f9915810cbb8a3e0306cfcca6c8a4d188a7a31f”,“phone\_number”:“”}}

Response:  
{“code”:403,“message”:“You do not have permission.”}

Message: The remote server returned an error: (403) Forbidden.

Does the Server to Server OAUTH allow call control using this endpoint?

Thanks,  
George

---

<div class="post-metadata">

**Author:** ![gianni.zoom](https://sea2.discourse-cdn.com/flex016/user_avatar/devforum.zoom.us/gianni.zoom/32/32523_2.png) [@gianni.zoom](https://devforum.zoom.us/u/gianni.zoom)\
**Post date:** [March 14, 2025, 8:08pm UTC](https://devforum.zoom.us/t/call-control-call-command-returns-forbidden/129887/3 "2025-03-14T20:08:28Z")

</div>

Looking into this for you.

---

<div class="post-metadata">

**Author:** ![gschally](https://avatars.discourse-cdn.com/v4/letter/g/6a8cbe/32.png) [@gschally](https://devforum.zoom.us/u/gschally)\
**Post date:** [March 18, 2025, 11:52am UTC](https://devforum.zoom.us/t/call-control-call-command-returns-forbidden/129887/4 "2025-03-18T11:52:46Z")

</div>

I really appreciate any help you can give. Would a client ID be helpful?

---

<div class="post-metadata">

**Author:** ![gianni.zoom](https://sea2.discourse-cdn.com/flex016/user_avatar/devforum.zoom.us/gianni.zoom/32/32523_2.png) [@gianni.zoom](https://devforum.zoom.us/u/gianni.zoom)\
**Post date:** [March 18, 2025, 3:42pm UTC](https://devforum.zoom.us/t/call-control-call-command-returns-forbidden/129887/5 "2025-03-18T15:42:27Z")

</div>

Hi @gschally , I am going to message you privately. Please check your notifications.

---

<div class="post-metadata">

**Author:** ![system](https://us1.discourse-cdn.com/flex016/uploads/zoomdeveloper/original/3X/6/1/614bdd549b610bbaa46ff934617683a02bdaa03c.png) [@system](https://devforum.zoom.us/u/system)\
**Post date:** [March 22, 2026, 7:19am UTC](https://devforum.zoom.us/t/call-control-call-command-returns-forbidden/129887/6 "2026-03-22T07:19:27Z")

</div>

Closed on March 22, 2026, 7:19am UTC

This topic was automatically closed 368 days after the last reply. New replies are no longer allowed.