# 'Invalid access token, does not contain scopes: \[user:write:admin, user:read:admin, user:read, user:write\].'

**URL:** <https://devforum.zoom.us/t/invalid-access-token-does-not-contain-scopes-useradmin-useradmin-user-read-user-write/84650>\
**Category:** Zoom Apps\
**Created:** [March 14, 2023, 2:36am UTC](https://devforum.zoom.us/t/invalid-access-token-does-not-contain-scopes-useradmin-useradmin-user-read-user-write/84650 "2023-03-14T02:36:56Z")\
**Posts on this page:** 6\
**Page:** 1

<div class="post-metadata">

**Author:** ![thaicao](https://sea2.discourse-cdn.com/flex016/user_avatar/devforum.zoom.us/thaicao/32/44091_2.png) [@thaicao](https://devforum.zoom.us/u/thaicao)\
**Post date:** [March 14, 2023, 2:36am UTC](https://devforum.zoom.us/t/invalid-access-token-does-not-contain-scopes-useradmin-useradmin-user-read-user-write/84650/1 "2023-03-14T02:36:56Z")

</div>

My app is a zoom client app where i use the onauthorized and authorize client apis that send authorization code to backend which then returns an access token .

When I try to make a request to get the user [https://api.zoom.us/v2/users/me](https://api.zoom.us/v2/users/me) using the access token I have retrieved with headers “Authorized”: “Bearer {ACCESS TOKEN}” it says ‘Invalid access token, does not contain scopes: [user:write:admin, user:read:admin, user:read, user:write].’

I have turned on all the scopes (Zoom App - Scopes) for user and zoom meetings and I also noticed that the accesstoken that is retrieved has (scope: zoom:Inmeeting)

Can someone please help me with this side of the app.

Thank you.

---

<div class="post-metadata">

**Author:** ![thaicao](https://sea2.discourse-cdn.com/flex016/user_avatar/devforum.zoom.us/thaicao/32/44091_2.png) [@thaicao](https://devforum.zoom.us/u/thaicao)\
**Post date:** [March 15, 2023, 11:24pm UTC](https://devforum.zoom.us/t/invalid-access-token-does-not-contain-scopes-useradmin-useradmin-user-read-user-write/84650/3 "2023-03-15T23:24:18Z")

</div>

How can I get assistance on this?

---

<div class="post-metadata">

**Author:** ![elisa.zoom](https://sea2.discourse-cdn.com/flex016/user_avatar/devforum.zoom.us/elisa.zoom/32/47836_2.png) [@elisa.zoom](https://devforum.zoom.us/u/elisa.zoom)\
**Post date:** [March 16, 2023, 6:13pm UTC](https://devforum.zoom.us/t/invalid-access-token-does-not-contain-scopes-useradmin-useradmin-user-read-user-write/84650/5 "2023-03-16T18:13:32Z")

</div>

Hi @thaicao  
Thanks for reaching out to the Zoom Developer. Forum, I am happy to help here!  
Could you please confirm how are you requesting the access token that you are trying to use to call the users/me endpoint?  
And when you generate it, do you get the scopes back in your response?

---

<div class="post-metadata">

**Author:** ![thaicao](https://sea2.discourse-cdn.com/flex016/user_avatar/devforum.zoom.us/thaicao/32/44091_2.png) [@thaicao](https://devforum.zoom.us/u/thaicao)\
**Post date:** [March 16, 2023, 9:14pm UTC](https://devforum.zoom.us/t/invalid-access-token-does-not-contain-scopes-useradmin-useradmin-user-read-user-write/84650/6 "2023-03-16T21:14:11Z")

</div>

Hi yes,  
I am using the client side api onAuthorized and authorize to get a response with a authorization code then I send it to the backend using the getToken method that is already setup with the zoomapp-sample-js-sdk app on github to retrieve the access token. The accessToken then is sent back to the client side with {scope: zoom:inMeeting}

Thank you for the help!

---

<div class="post-metadata">

**Author:** ![thaicao](https://sea2.discourse-cdn.com/flex016/user_avatar/devforum.zoom.us/thaicao/32/44091_2.png) [@thaicao](https://devforum.zoom.us/u/thaicao)\
**Post date:** [March 16, 2023, 10:22pm UTC](https://devforum.zoom.us/t/invalid-access-token-does-not-contain-scopes-useradmin-useradmin-user-read-user-write/84650/7 "2023-03-16T22:22:49Z")

</div>

Hi I responded below just wanted to make sure you got the notification.

---

<div class="post-metadata">

**Author:** ![system](https://us1.discourse-cdn.com/flex016/uploads/zoomdeveloper/original/3X/6/1/614bdd549b610bbaa46ff934617683a02bdaa03c.png) [@system](https://devforum.zoom.us/u/system)\
**Post date:** [March 20, 2024, 11:14am UTC](https://devforum.zoom.us/t/invalid-access-token-does-not-contain-scopes-useradmin-useradmin-user-read-user-write/84650/9 "2024-03-20T11:14:02Z")

</div>

This topic was automatically closed 368 days after the last reply. New replies are no longer allowed.