Do super admin and admin have permission to generate JWT token separately

[saira]

I have a Licenced zoom account. I have integrated zoom with zoho calendar now in admins calendar the events of super admin are showing.

Error
On admins calendar the events of super admin are showing.

Which App Type (OAuth / Chatbot / JWT / Webhook)?
I used JWT token .Super admin generated JWT token for the admin.

[gianni.zoom (Gianni)]

Hi @saira,

I’m not familiar with Zoho calendar, but only one set of JWT credentials is allowed per account. If you’re using the same JWT credentials in the integration, you will be able to see everyone on the account’s information because JWT is a master key.

Is there an option to use OAuth for the integration?

Gianni

[saira]

So, you mean to say that on a single paid account only the super admin has rights to create JWT token and all the users (lets says admin or other) of that account will use that JWT token they cannot generate separately one for themselves. And the problem which I’m facing is due to this reason that there is only one JWT token which is shared among all the zoom account users.

Yes OAuth is a good option but I was facing an issue with its refresh token it was generating new refresh token everytime so I was not able to fetch once and user it every time. Do you have solution for this issue.

[gianni.zoom (Gianni)]

Hi Saira,

Let me clarify with the following:

@will.zoom

the JWT app you create under your Enterprise account JWT is an account-wide app and is available to all the admins and owners of the account. You can have only 1 JWT marketplace app registered in your account.

However, you can generate multiple JWT tokens using the JWT keys, and the tokens operate independently of each other until expired or the credentials have been changed. Keep in mind, however, a JWT token will contain all the permissions, and there is no way to restrict it.

Individual admin can go to the marketplace and create their own JWT app for their specific accounts, but the master/enterprise account (or super admin) has access to all accounts underneath the organization. I hope this makes more sense.

@saira

Yes OAuth is a good option but I was facing an issue with its refresh token it was generating new refresh token everytime so I was not able to fetch once and user it every time. Do you have solution for this issue.

You should not experience this issue. The refresh token should work. What error are you seeing?

Best,
Gianni