Delete CloudRecording failing for some app users

[zoom-test (Panopto Dev)]

Description
My app in the marketplace has the ability to delete recordings when required. For most users of the app this works just fine to call this endpoint:

/v2/meetings/recording_uuid/recordings?action=trash
https://marketplace.zoom.us/docs/api-reference/zoom-api/cloud-recording/recordingdelete

But for some users I get a “No Permission” response:

Is there an Account Setting that disables delete permission but for only certain users/OAuth tokens?

Error

{
    "code": 200,
    "message": "No permission."
}

Which App Type (OAuth / Chatbot / JWT / Webhook)?
OAuth app

Which Endpoint/s?
https://marketplace.zoom.us/docs/api-reference/zoom-api/cloud-recording/recordingdelete

How To Reproduce (If applicable)
Steps to reproduce the behavior:

1. Build OAuth app with recording delete permissions
2. Make some zoom recordings
3. Try to delete, for some accounts I get “No Permission”

[tommy (Tommy Gaessler)]

Hey @zoom-test,

Is this a User Level OAuth app? That error usually means that user does not have the proper permissions to delete a Cloud Recording. I have seen this happen when a users permissions change after installation of the app.

Related post:

Error on get webinar participants

Account-level app. I see in logs weird (undocumented) error on attempt to get webinar participants report: { "code"=200, "message"="No permission." } The error appears on a bunch of Zoom accounts. What might be the reason(s) of such an error? P.S. Doesn’t seem to be a missing report:read:admin scope issue because the error in this case is a bit different: { "code": 4700, "message": "Invalid access token, does not contain scopes: [report:read:admin, zms:report:read]" }

Thanks,
Tommy

[zoom-test (Panopto Dev)]

This is an Account Level App.

I have seen that scenario happen before though since it seems that the OAuth token you get when you connect the app is still tied to the user who connected it. So if they were ever downgraded from admin then you lose permissions. Which means it’s Account Level but only as far as the user who authenticated has permissions.

Is it possible then that even though I am requesting read/write permissions for recordings that if the user doesn’t have that permission themselves then I won’t be able to?

[tommy (Tommy Gaessler)]

Hey @zoom-test,

Good question.

@zoom-test

Is it possible then that even though I am requesting read/write permissions for recordings that if the user doesn’t have that permission themselves then I won’t be able to?

Since this app is an account level, you should be able to get any of the information specified in the scopes. Unless the user who installed it had their permissions changed.

Thanks,
Tommy