# Getting invalid access token, does not contain scopes on Webinar API?

**URL:** <https://devforum.zoom.us/t/getting-invalid-access-token-does-not-contain-scopes-on-webinar-api/115352>\
**Category:** Webinars\
**Created:** [August 9, 2024, 7:46am UTC](https://devforum.zoom.us/t/getting-invalid-access-token-does-not-contain-scopes-on-webinar-api/115352 "2024-08-09T07:46:16Z")\
**Posts on this page:** 1\
**Showing post:** 2

<div class="post-metadata">

**Author:** ![elisa.zoom](https://sea2.discourse-cdn.com/flex016/user_avatar/devforum.zoom.us/elisa.zoom/32/47836_2.png) [@elisa.zoom](https://devforum.zoom.us/u/elisa.zoom)\
**Post date:** [August 9, 2024, 7:16pm UTC](https://devforum.zoom.us/t/getting-invalid-access-token-does-not-contain-scopes-on-webinar-api/115352/2 "2024-08-09T19:16:50Z")

</div>

Hi @global  
Thanks for reaching out!  
Make sure that your user has the right permissions enabled for your role so you will be able to see the scopes available for your app. An admin on your account will need to grant you permission to create and manage webinars

Here is a link to our Docs:

> **[Internal apps (Server-to-server)](https://developers.zoom.us/docs/internal-apps/#assign-permissions-to-access-scopes)**
>
> The Zoom Developer Platform is an open platform that allows third-party developers to build applications and integrations upon Zoom’s video-first unified communications platform.

This guide might also be helpful for you

> [@How to user Server-to-Sever OAuth app with Postman](https://devforum.zoom.us/t/how-to-user-server-to-sever-oauth-app-with-postman/70848):
>
> How to use our Server-to-Server OAuth with Postman? As some of you might be aware of, our JWT app is being deprecated by June 2023 and we encourage you to migrate to the newly introduced [Server-to-Server OAuth App](https://marketplace.zoom.us/docs/guides/build/server-to-server-oauth-app) That being said, here is a quick and simple guide on how to use or new app with Postman As stated in our documentation here: This new app type facilitates OAuth-authenticated requests between servers without end-user involvement. And this grant type enable your private server a…

---

_[View the full topic](https://devforum.zoom.us/t/getting-invalid-access-token-does-not-contain-scopes-on-webinar-api/115352)._
