# Difference between User:Read vs user\_profile permission?

**URL:** <https://devforum.zoom.us/t/difference-between-user-read-vs-user-profile-permission/24983>\
**Category:** API and Webhooks\
**Created:** [July 23, 2020, 1:38pm UTC](https://devforum.zoom.us/t/difference-between-user-read-vs-user-profile-permission/24983 "2020-07-23T13:38:49Z")\
**Posts on this page:** 5\
**Page:** 1

<div class="post-metadata">

**Author:** ![mokutsu](https://sea2.discourse-cdn.com/flex016/user_avatar/devforum.zoom.us/mokutsu/32/27515_2.png) [@mokutsu](https://devforum.zoom.us/u/mokutsu)\
**Post date:** [July 23, 2020, 1:38pm UTC](https://devforum.zoom.us/t/difference-between-user-read-vs-user-profile-permission/24983/1 "2020-07-23T13:38:49Z")

</div>

**Description**  
The app permissions list includes an option for user\_profile but this permission is not mentioned anywhere in the documentation.

I’m only interested in using the [https://api.zoom.us/v2/users/me](https://api.zoom.us/v2/users/me) endpoint to get the user’s email and creation date for a user managed oauth app.

What is user\_profile permission for? User:read seems to grant a lot more access than we need; is uesr\_profile a valid alternative?

**Which App Type (OAuth / Chatbot / JWT / Webhook)?**  
OAuth

**Which Endpoint/s?**  
[https://api.zoom.us/v2/users/me](https://api.zoom.us/v2/users/me)

Screenshots:

 ![Screen Shot 2020-07-23 at 9.37.23 AM](https://us1.discourse-cdn.com/flex016/uploads/zoomdeveloper/original/2X/d/d6751d28cf337907a9ac3bf5214d88a0b987a200.png)

---

<div class="post-metadata">

**Author:** ![mokutsu](https://sea2.discourse-cdn.com/flex016/user_avatar/devforum.zoom.us/mokutsu/32/27515_2.png) [@mokutsu](https://devforum.zoom.us/u/mokutsu)\
**Post date:** [July 23, 2020, 1:43pm UTC](https://devforum.zoom.us/t/difference-between-user-read-vs-user-profile-permission/24983/3 "2020-07-23T13:43:56Z")

</div>

Adding on, I found [https://marketplace.zoom.us/docs/guides/using-apps/permissions](https://marketplace.zoom.us/docs/guides/using-apps/permissions), but the description for user\_profile just says “Users individual management and meeting settings”, and doesn’t seem to indicate which endpoints are included within this. Does this include viewing /v2/users/me?

---

<div class="post-metadata">

**Author:** ![tommy](https://sea2.discourse-cdn.com/flex016/user_avatar/devforum.zoom.us/tommy/32/72769_2.png) [@tommy](https://devforum.zoom.us/u/tommy)\
**Post date:** [July 27, 2020, 8:30pm UTC](https://devforum.zoom.us/t/difference-between-user-read-vs-user-profile-permission/24983/4 "2020-07-27T20:30:51Z")

</div>

Hey @mokutsu,

We will clear the `user_profile` scope up in the docs CC @shrijana.g.

That being said, please use the `user:read` scope for the [Get User API](https://marketplace.zoom.us/docs/api-reference/zoom-api/users/user).

Thanks,  
Tommy

---

<div class="post-metadata">

**Author:** ![shrijana.g](https://sea2.discourse-cdn.com/flex016/user_avatar/devforum.zoom.us/shrijana.g/32/605_2.png) [@shrijana.g](https://devforum.zoom.us/u/shrijana.g)\
**Post date:** [July 30, 2020, 1:44pm UTC](https://devforum.zoom.us/t/difference-between-user-read-vs-user-profile-permission/24983/5 "2020-07-30T13:44:53Z")

</div>

Hi @mokutsu,

Thank you for bringing this up. This scope was available in our legacy API which no longer works. I have removed the scope from the doc. For an updated list of scopes and accessible APIs, please refer to this doc: [https://marketplace.zoom.us/docs/guides/auth/oauth/oauth-scopes](https://marketplace.zoom.us/docs/guides/auth/oauth/oauth-scopes)

Sincerely,  
Shrijana

---

<div class="post-metadata">

**Author:** ![system](https://us1.discourse-cdn.com/flex016/uploads/zoomdeveloper/original/3X/6/1/614bdd549b610bbaa46ff934617683a02bdaa03c.png) [@system](https://devforum.zoom.us/u/system)\
**Post date:** [August 6, 2020, 1:44pm UTC](https://devforum.zoom.us/t/difference-between-user-read-vs-user-profile-permission/24983/6 "2020-08-06T13:44:56Z")

</div>

This topic was automatically closed 7 days after the last reply. New replies are no longer allowed.
