List Auto Receptionists responses with HTTP 403


Format Your New Topic as Follows:

API Endpoint(s) and/or Zoom API Event(s)
.api.zoom.us/v2/phone/auto_receptionists

Description
Our Client is able to get the Token with oAuth2, but gets an http403 (forbidden) while calling Zoom API auto_receptionist

We believe that the App-Settings are okay and wonder what causes this error.

App: scope is set to phone:read:list_auto_receptionists:admin phone:read:auto_receptionist:admi n

REQUES T

curl --request POST \
--url …api.zoom.us/oauth/token \
--header ‘Authorization: Basic …’ \
--header ‘account_id: ykuFmhAeROeh2a_x4dKORg’ \
--header ‘content-type: application/x-www-form-urlencoded’ \
--data grant_type=account_credentials \
--data account_id =…

RESP ONSE

{
“access_token”: “…”, “token_type”: “bearer”,
“expires_in”: 3599,
“scope”: “phone:read:list_auto_receptionists:admin phone:read:auto_receptionist:admin”,
* “api_url”: ..api-zoom.eu.
}

List auto recept ionists

REQUEST
curl --request GET \
--url ‘…api.zoom.us/v2/phone/auto_receptionists/10?page_size=30&next_page_token=’ \
--header ‘Accept: application/json’ \
--header ‘Authorization: B e ar er …’

RESPONSE

{ “code”: 403, “message”: “You do not have p ermission.”}

Error?
{ “code”: 403, “message”: “You do not have permission.”}

What else?
The Owner of the App has Admin-rights

We would be glad if someone could help us in finding the possible points of failure and finally the solution for this to work!

T hanks

Jens

Just sharing a thought here, if the token is generating fine and the scopes look correct, maybe the issue is related to Zoom Phone licensing or account permissions instead of OAuth scopes only. I also noticed the request is using /phone/auto_receptionists/10, are you sure 10 is a valid auto receptionist ID for that account? Maybe try the general list endpoint first and see if it still returns 403. That could help narrow down whether it is a permission issue or something specific to the endpoint or ID.

Hi Rehan,

the URL was my fault, it also doesn’t work with listing the auto_receptionists. The scopes shouldn’t be a matter, we use scope": “phone:read:list_auto_receptionists:admin phone:read:auto_receptionist:admin” and that should be enough.

For the license, we are using a Zoom Phone Basic-license, is that enough to use the API’s?