Invalid access token, does not contain scopes (with any master scopes)

API Endpoint(s) and/or Zoom API Event(s)

{api_url}/v2/accounts/{account_id}/users
{api_url}/v2/users/{user_id}/recordings

Description
I am attempting to retrieve a list of recordings for all users. I am using Server-to-Server OAuth flow, and I am using the “Account Owner” user to create the app and apply the scopes. I have full access to everything in the Zoom instance. I have authenticated and received an access token with the correct scopes applied, but the Zoom API rejects it.

Error?
400 Error - ‘{“code”:4711,“message”:“Invalid access token, does not contain scopes:[user:read:list_users:master].”}’

I have validated that the scope is included, exactly as it’s written, and it’s also visible when I check the contents of the access token returned by the authorization API.

How To Reproduce
Steps to reproduce the behavior:
Create App with relevant scopes such as “user:read:list_users:master”
Use provided credentials to receive access token
Use access token to retrieve list of users
400 error code with text response that scope is missing

Server-to-Server OAuth
Intend to publish: No
Account Level

‘{“code”:4711,“message”:“Invalid access token, does not contain scopes:[user:read:list_users:master].”}’

1 Like

Hi @tswinehart ,

Please see above. I will reach back out soon.

1 Like

Bug submitted (ZSEE-141967). Please follow other thread for updates.

1 Like