# Code 200, No permission on Account & User Settings Request

**URL:** <https://devforum.zoom.us/t/code-200-no-permission-on-account-user-settings-request/42859>\
**Category:** API and Webhooks\
**Created:** [February 8, 2021, 11:53pm UTC](https://devforum.zoom.us/t/code-200-no-permission-on-account-user-settings-request/42859 "2021-02-08T23:53:37Z")\
**Posts on this page:** 15\
**Page:** 1

<div class="post-metadata">

**Author:** ![jason.m42](https://sea2.discourse-cdn.com/flex016/user_avatar/devforum.zoom.us/jason.m42/32/22803_2.png) [@jason.m42](https://devforum.zoom.us/u/jason.m42)\
**Post date:** [February 8, 2021, 11:53pm UTC](https://devforum.zoom.us/t/code-200-no-permission-on-account-user-settings-request/42859/1 "2021-02-08T23:53:37Z")

</div>

**Description**  
Sometimes on a request sent to [https://api.zoom.us/v2/accounts/me/settings](https://api.zoom.us/v2/accounts/me/settings) I am getting an unusual response that the user do not have permission to make this call.  
EDIT: Also sometimes on requests sent to [https://api.zoom.us/v2/users/{userId}/settings](https://api.zoom.us/v2/users/%7BuserId%7D/settings)

**Error**  
{“code”:200,“message”:“No permission.”}

**Which App Type (OAuth / Chatbot / JWT / Webhook)?**  
OAuth

I was wondering in what ways it would be possible for an account or user to receive this response from a request to these endpoints as I have been seeing it somewhat regularly and have no clue what’s causing this error.

---

<div class="post-metadata">

**Author:** ![MaxM](https://sea2.discourse-cdn.com/flex016/user_avatar/devforum.zoom.us/maxm/32/42303_2.png) [@MaxM](https://devforum.zoom.us/u/MaxM)\
**Post date:** [February 10, 2021, 12:33am UTC](https://devforum.zoom.us/t/code-200-no-permission-on-account-user-settings-request/42859/2 "2021-02-10T00:33:11Z")

</div>

Hey @jason.m42,

Thank you for reaching out to the Zoom Developer Forum. Just to confirm, you are using OAuth for these requests, correct?

Please provide an example of the request body that you’re using when making the /acocunts/me/settings request.

Thanks,  
Max

---

<div class="post-metadata">

**Author:** ![jason.m42](https://sea2.discourse-cdn.com/flex016/user_avatar/devforum.zoom.us/jason.m42/32/22803_2.png) [@jason.m42](https://devforum.zoom.us/u/jason.m42)\
**Post date:** [February 10, 2021, 4:56pm UTC](https://devforum.zoom.us/t/code-200-no-permission-on-account-user-settings-request/42859/3 "2021-02-10T16:56:45Z")

</div>

Hi Max,  
Yes we’re using OAuth for the requests. I’ve put an example of the data in the request below (with a shortened token).

`{Method: GET, RequestUri: 'https://api.zoom.us/v2/accounts/me/settings', Version: 1.1, Content: <null>, Headers: { Authorization: Bearer eyJhbGci[...]St8g Accept: application/json }}`

---

<div class="post-metadata">

**Author:** ![MaxM](https://sea2.discourse-cdn.com/flex016/user_avatar/devforum.zoom.us/maxm/32/42303_2.png) [@MaxM](https://devforum.zoom.us/u/MaxM)\
**Post date:** [February 11, 2021, 8:31pm UTC](https://devforum.zoom.us/t/code-200-no-permission-on-account-user-settings-request/42859/4 "2021-02-11T20:31:29Z")

</div>

Hey @jason.m42,

Thank you for the update. It looks like the [Get Settings Account API](https://marketplace.zoom.us/docs/api-reference/zoom-api/accounts/accountsettings) requires a paid account:

 ![image](https://us1.discourse-cdn.com/flex016/uploads/zoomdeveloper/original/3X/3/3/338dcbe4019a3d71a23dc3c6e83e9114d40e9f49.png)

I hope that helps!

Thanks,  
Max

---

<div class="post-metadata">

**Author:** ![jason.m42](https://sea2.discourse-cdn.com/flex016/user_avatar/devforum.zoom.us/jason.m42/32/22803_2.png) [@jason.m42](https://devforum.zoom.us/u/jason.m42)\
**Post date:** [February 11, 2021, 9:44pm UTC](https://devforum.zoom.us/t/code-200-no-permission-on-account-user-settings-request/42859/5 "2021-02-11T21:44:17Z")

</div>

Hi Max,  
I’ve also gotten the error `{"code":200,"message":"Only available for Paid account."}` at this same endpoint from different users. Would a `No Permission` be the same error or is there a difference that causes a `No Permission` error versus `Only available for Paid account`?

Thanks,  
Jason

---

<div class="post-metadata">

**Author:** ![MaxM](https://sea2.discourse-cdn.com/flex016/user_avatar/devforum.zoom.us/maxm/32/42303_2.png) [@MaxM](https://devforum.zoom.us/u/MaxM)\
**Post date:** [February 12, 2021, 7:15pm UTC](https://devforum.zoom.us/t/code-200-no-permission-on-account-user-settings-request/42859/6 "2021-02-12T19:15:22Z")

</div>

Hey @jason.m42,

It’s possible that the error messaging changes depending on if you are using the `/me` route or if you are using the `userId`. If you’re able to share a request that returns the `Only available for Paid account` error I’ll provide more specifics.

Thanks,  
Max

---

<div class="post-metadata">

**Author:** ![jason.m42](https://sea2.discourse-cdn.com/flex016/user_avatar/devforum.zoom.us/jason.m42/32/22803_2.png) [@jason.m42](https://devforum.zoom.us/u/jason.m42)\
**Post date:** [February 16, 2021, 4:44pm UTC](https://devforum.zoom.us/t/code-200-no-permission-on-account-user-settings-request/42859/7 "2021-02-16T16:44:58Z")

</div>

Hey @MaxM,  
The requests where we get these errors are being constructed the exact same way, and are all being sent to the `/me` route. The only difference there should be is the account that is making the request. Receiving `Only available for Paid account` is pretty clear, but `No Permission` is confusing. It could be possible a sub-account is triggering the route that sends an `accounts/me` request though. Would that cause a `No Permission` response?

---

<div class="post-metadata">

**Author:** ![MaxM](https://sea2.discourse-cdn.com/flex016/user_avatar/devforum.zoom.us/maxm/32/42303_2.png) [@MaxM](https://devforum.zoom.us/u/MaxM)\
**Post date:** [February 17, 2021, 7:45pm UTC](https://devforum.zoom.us/t/code-200-no-permission-on-account-user-settings-request/42859/8 "2021-02-17T19:45:43Z")

</div>

Hey @jason.m42,

Thank you for the update. Yes, if you’re calling this endpoint with credentials from a sub-account then you’ll encounter this issue. This is to prevent sub-accounts from making changes that affect the master account.

Let me know if you have any questions.

Thanks,  
Max

---

<div class="post-metadata">

**Author:** ![jason.m42](https://sea2.discourse-cdn.com/flex016/user_avatar/devforum.zoom.us/jason.m42/32/22803_2.png) [@jason.m42](https://devforum.zoom.us/u/jason.m42)\
**Post date:** [February 17, 2021, 8:20pm UTC](https://devforum.zoom.us/t/code-200-no-permission-on-account-user-settings-request/42859/9 "2021-02-17T20:20:23Z")

</div>

Hey @MaxM,  
Thanks for the response. One follow-up question, is there a request I can make to the API to determine if an account is a sub-account versus a master account?

Thanks

---

<div class="post-metadata">

**Author:** ![MaxM](https://sea2.discourse-cdn.com/flex016/user_avatar/devforum.zoom.us/maxm/32/42303_2.png) [@MaxM](https://devforum.zoom.us/u/MaxM)\
**Post date:** [February 17, 2021, 10:41pm UTC](https://devforum.zoom.us/t/code-200-no-permission-on-account-user-settings-request/42859/10 "2021-02-17T22:41:09Z")

</div>

Hey @jason.m42,

Good question! There are a couple of different options when it comes to checking if an account is a master account or not.

1. You can compare the account Id with what is found in the [List Sub-Accounts API](https://marketplace.zoom.us/docs/api-reference/zoom-api/accounts/accounts)

2. You can call the [Get a Sub Account API](https://marketplace.zoom.us/docs/api-reference/zoom-api/accounts/account) and check for a 404 response to indicate that it is not a sub account

3. As we’ve seen, you can check for a “No Permission” error to confirm if you are calling the API as a Sub-Account.

Let me know if that helps.

Thanks,  
Max

---

<div class="post-metadata">

**Author:** ![jason.m42](https://sea2.discourse-cdn.com/flex016/user_avatar/devforum.zoom.us/jason.m42/32/22803_2.png) [@jason.m42](https://devforum.zoom.us/u/jason.m42)\
**Post date:** [February 18, 2021, 11:05pm UTC](https://devforum.zoom.us/t/code-200-no-permission-on-account-user-settings-request/42859/11 "2021-02-18T23:05:27Z")

</div>

Hi @MaxM,  
That’s very helpful, thank you!

One additional followup question, occasionally we also get the same “No permission” responses on requests to `https://api.zoom.us/v2/users/{userId}/settings` where userId is a valid Zoom User Id. I’ve seen that permissions can be assigned for Users, so would the error in this case be that the User does not have permissions to view their own settings?

Thanks for all your help!

---

<div class="post-metadata">

**Author:** ![MaxM](https://sea2.discourse-cdn.com/flex016/user_avatar/devforum.zoom.us/maxm/32/42303_2.png) [@MaxM](https://devforum.zoom.us/u/MaxM)\
**Post date:** [February 19, 2021, 9:49pm UTC](https://devforum.zoom.us/t/code-200-no-permission-on-account-user-settings-request/42859/12 "2021-02-19T21:49:56Z")

</div>

Hey @jason.m42,

Thank you for your question. Looking at your “rev-RLC” app, I’m not seeing a reason why this would happen. Is that the app you’re using when you see this issue? Are you able to provide a user ID that exhibits this error as well?

Thanks,  
Max

---

<div class="post-metadata">

**Author:** ![jason.m42](https://sea2.discourse-cdn.com/flex016/user_avatar/devforum.zoom.us/jason.m42/32/22803_2.png) [@jason.m42](https://devforum.zoom.us/u/jason.m42)\
**Post date:** [February 19, 2021, 10:55pm UTC](https://devforum.zoom.us/t/code-200-no-permission-on-account-user-settings-request/42859/13 "2021-02-19T22:55:25Z")

</div>

Hi @MaxM,  
Apologies for the confusion, the app on this account is just for local testing purposes. I’m investigating issues being seen for a different app that is already published on the marketplace, just not attached to this account.

I do have an example though; a request was made to [https://api.zoom.us/v2/users/OidcEPa3RqSVQWrKf\_iKFQ/settings](https://api.zoom.us/v2/users/OidcEPa3RqSVQWrKf_iKFQ/settings) and got back `{\"code\":200,\"message\":\"No permission.\"}`.

Thanks for all your help!

---

<div class="post-metadata">

**Author:** ![MaxM](https://sea2.discourse-cdn.com/flex016/user_avatar/devforum.zoom.us/maxm/32/42303_2.png) [@MaxM](https://devforum.zoom.us/u/MaxM)\
**Post date:** [February 22, 2021, 9:08pm UTC](https://devforum.zoom.us/t/code-200-no-permission-on-account-user-settings-request/42859/14 "2021-02-22T21:08:01Z")

</div>

Hey @jason.m42,

Thank you for the update. As this is associated with a different account, please send an email to [developersupport@zoom.us](mailto:developersupport@zoom.us) with a link to this thread, as well as the account owner ID and app name involved. I’ll investigate this from there.

Thanks,  
Max

---

<div class="post-metadata">

**Author:** ![system](https://us1.discourse-cdn.com/flex016/uploads/zoomdeveloper/original/3X/6/1/614bdd549b610bbaa46ff934617683a02bdaa03c.png) [@system](https://devforum.zoom.us/u/system)\
**Post date:** [March 25, 2021, 7:08am UTC](https://devforum.zoom.us/t/code-200-no-permission-on-account-user-settings-request/42859/15 "2021-03-25T07:08:11Z")

</div>

Closed on March 25, 2021, 7:08am UTC

This topic was automatically closed 30 days after the last reply. New replies are no longer allowed.
