# Guidance on Scopes Needed

**URL:** <https://devforum.zoom.us/t/guidance-on-scopes-needed/99349>\
**Category:** Users and Groups\
**Created:** [December 1, 2023, 12:40am UTC](https://devforum.zoom.us/t/guidance-on-scopes-needed/99349 "2023-12-01T00:40:01Z")\
**Posts on this page:** 4\
**Page:** 1

<div class="post-metadata">

**Author:** ![wongj](https://sea2.discourse-cdn.com/flex016/user_avatar/devforum.zoom.us/wongj/32/49497_2.png) [@wongj](https://devforum.zoom.us/u/wongj)\
**Post date:** [December 1, 2023, 12:40am UTC](https://devforum.zoom.us/t/guidance-on-scopes-needed/99349/1 "2023-12-01T00:40:01Z")

</div>

I’m trying to update one of my organization’s scripts that manages user accounts across the whole org. This script uses the now deprecated JWT, and I am trying to complete the migration to OAuth.

I’m not sure about the scopes I need for my particular case, as I haven’t done this before, and just wanted to verify if my line of thinking was correct.

I believe this script’s only interaction with Zoom is disabling individual user accounts if they’re no longer actively employed by my org. What scope do I need to add to the application so I can do this?

So far, I’ve added `/user:read:admin` and `/user:write:admin`

Does this seem correct?

---

<div class="post-metadata">

**Author:** ![elisa.zoom](https://sea2.discourse-cdn.com/flex016/user_avatar/devforum.zoom.us/elisa.zoom/32/47836_2.png) [@elisa.zoom](https://devforum.zoom.us/u/elisa.zoom)\
**Post date:** [December 1, 2023, 7:45pm UTC](https://devforum.zoom.us/t/guidance-on-scopes-needed/99349/2 "2023-12-01T19:45:26Z")

</div>

Hi @wongj  
Thanks for reaching out to us and welcome to our community!  
To provide you with some guidance, it would be ideal if you could identify what endpoints your script is hitting, that way you will be able to add the scopes that you need

---

<div class="post-metadata">

**Author:** ![wongj](https://sea2.discourse-cdn.com/flex016/user_avatar/devforum.zoom.us/wongj/32/49497_2.png) [@wongj](https://devforum.zoom.us/u/wongj)\
**Post date:** [December 1, 2023, 10:07pm UTC](https://devforum.zoom.us/t/guidance-on-scopes-needed/99349/3 "2023-12-01T22:07:47Z")

</div>

I’m assuming that by endpoint, you mean Zoom product? So I think in this case, it would be Zoom Meetings. Might be worth mentioning–this is also the only Zoom product my org is using.

---

<div class="post-metadata">

**Author:** ![elisa.zoom](https://sea2.discourse-cdn.com/flex016/user_avatar/devforum.zoom.us/elisa.zoom/32/47836_2.png) [@elisa.zoom](https://devforum.zoom.us/u/elisa.zoom)\
**Post date:** [December 3, 2023, 7:57pm UTC](https://devforum.zoom.us/t/guidance-on-scopes-needed/99349/4 "2023-12-03T19:57:58Z")

</div>

Hi @wongj  
By endpoints I mean what APIs your script is hitting, for example if you are getting a list of all the users under the account, then most likely your script is hitting the Get users endpoint:

> **[Zoom Meeting API](https://developers.zoom.us/docs/api/rest/reference/zoom-api/methods/#operation/users)**
>
> API Reference for /docs/api/rest/reference/zoom-api/methods

So if you could gather a list of the endpoints the script is calling, then it would be easier for us to guide you 🙂