# How to determine granted scopes?

**URL:** <https://devforum.zoom.us/t/how-to-determine-granted-scopes/109243>\
**Category:** Authentication\
**Created:** [May 4, 2024, 1:49pm UTC](https://devforum.zoom.us/t/how-to-determine-granted-scopes/109243 "2024-05-04T13:49:17Z")\
**Posts on this page:** 2\
**Page:** 1

<div class="post-metadata">

**Author:** ![isaac](https://sea2.discourse-cdn.com/flex016/user_avatar/devforum.zoom.us/isaac/32/22034_2.png) [@isaac](https://devforum.zoom.us/u/isaac)\
**Post date:** [May 4, 2024, 1:49pm UTC](https://devforum.zoom.us/t/how-to-determine-granted-scopes/109243/1 "2024-05-04T13:49:17Z")

</div>

When creating an oauth app using optional granular scopes, how can my server determine which optional scopes the user granted, if any?

Is the only solution to attempt an api call for each potential scope?

---

<div class="post-metadata">

**Author:** ![freelancer.nak](https://sea2.discourse-cdn.com/flex016/user_avatar/devforum.zoom.us/freelancer.nak/32/40968_2.png) [@freelancer.nak](https://devforum.zoom.us/u/freelancer.nak)\
**Post date:** [May 4, 2024, 2:26pm UTC](https://devforum.zoom.us/t/how-to-determine-granted-scopes/109243/2 "2024-05-04T14:26:44Z")

</div>

@Isaac Hope you will be fine.

In the response of ‘POST’ [https://zoom.us/oauth/token](https://zoom.us/oauth/token) endpoint you have

scope: read/write scopes

Thanks