# List Auto Receptionists responses with HTTP 403

**URL:** <https://devforum.zoom.us/t/list-auto-receptionists-responses-with-http-403/143752>\
**Category:** API and Webhooks\
**Tags:** phone, api\
**Created:** [May 20, 2026, 9:28am UTC](https://devforum.zoom.us/t/list-auto-receptionists-responses-with-http-403/143752 "2026-05-20T09:28:21Z")\
**Posts on this page:** 5\
**Page:** 1

<div class="post-metadata">

**Author:** ![Jens3](https://avatars.discourse-cdn.com/v4/letter/j/a87d85/32.png) [@Jens3](https://devforum.zoom.us/u/Jens3)\
**Post date:** [May 20, 2026, 9:28am UTC](https://devforum.zoom.us/t/list-auto-receptionists-responses-with-http-403/143752/1 "2026-05-20T09:28:21Z")

</div>

* * *

### Format Your New Topic as Follows:

**API Endpoint(s) and/or Zoom API Event(s)**  
_.api.zoom.us/v2/phone/auto\_receptionists_

**Description**  
_Our Client is able to get the Token with oAuth2, but gets an http403 (forbidden) while calling Zoom_ API auto\_receptionist

We believe that the App-Settings are okay and wonder what causes this error.

App: scope is set to _phone:read:list\_auto\_receptionists:admin phone:read:auto\_receptionist:admi n_

_ **REQUES T** _

_curl --request POST \_  
 _--url …api.zoom.us/oauth/token \_  
 _--header ‘Authorization: Basic …’ \_  
 _--header ‘account\_id: ykuFmhAeROeh2a\_x4dKORg’ \_  
 _--header ‘content-type: application/x-www-form-urlencoded’ \_  
 _--data grant\_type=account\_credentials \_  
 _--data account\_id =…_

_ **RESP ONSE** _

_{_  
 _“access\_token”: “…”, “token\_type”: “bearer”,_  
 _“expires\_in”: 3599,_  
 _“scope”: “phone:read:list\_auto\_receptionists:admin phone:read:auto\_receptionist:admin”,_  
\* “api\_url”: ..api-zoom.eu.  
_}_

List auto recept ionists

_ **REQUEST** _  
_curl --request GET \_  
 _--url ‘…api.zoom.us/v2/phone/auto\_receptionists/10?page\_size=30&next\_page\_token=’ \_  
 _--header ‘Accept: application/json’ \_  
 _--header ‘Authorization: B e ar er …’_

_ **RESPONSE** _

_{ “code”: 403, “message”: “You do not have p ermission.”}_

**Error?**  
_{ “code”: 403, “message”: “You do not have permission.”}_

**What else?**  
_The Owner of the App has Admin-rights_

We would be glad if someone could help us in finding the possible points of failure and finally the solution for this to work!

T hanks

Jens

---

<div class="post-metadata">

**Author:** ![Rehan1](https://sea2.discourse-cdn.com/flex016/user_avatar/devforum.zoom.us/rehan1/32/52457_2.png) [@Rehan1](https://devforum.zoom.us/u/Rehan1)\
**Post date:** [May 20, 2026, 6:55pm UTC](https://devforum.zoom.us/t/list-auto-receptionists-responses-with-http-403/143752/2 "2026-05-20T18:55:49Z")

</div>

Just sharing a thought here, if the token is generating fine and the scopes look correct, maybe the issue is related to Zoom Phone licensing or account permissions instead of OAuth scopes only. I also noticed the request is using `/phone/auto_receptionists/10`, are you sure `10` is a valid auto receptionist ID for that account? Maybe try the general list endpoint first and see if it still returns 403. That could help narrow down whether it is a permission issue or something specific to the endpoint or ID.

---

<div class="post-metadata">

**Author:** ![Jens3](https://avatars.discourse-cdn.com/v4/letter/j/a87d85/32.png) [@Jens3](https://devforum.zoom.us/u/Jens3)\
**Post date:** [May 21, 2026, 12:37pm UTC](https://devforum.zoom.us/t/list-auto-receptionists-responses-with-http-403/143752/3 "2026-05-21T12:37:50Z")

</div>

Hi Rehan,

the URL was my fault, it also doesn’t work with listing the auto\_receptionists. The scopes shouldn’t be a matter, we use _scope": “phone:read:list\_auto\_receptionists:admin phone:read:auto\_receptionist:admin” and that should be enough._

For the license, we are using a Zoom Phone Basic-license, is that enough to use the API’s?

---

<div class="post-metadata">

**Author:** ![Jens3](https://avatars.discourse-cdn.com/v4/letter/j/a87d85/32.png) [@Jens3](https://devforum.zoom.us/u/Jens3)\
**Post date:** [May 27, 2026, 8:52am UTC](https://devforum.zoom.us/t/list-auto-receptionists-responses-with-http-403/143752/4 "2026-05-27T08:52:22Z")

</div>

@Rehan1 we booked a Zoom Phone Pro license for the user that owns the app, the user does not own a Zoom Workplace Pro-license as of now. Result is still the same as we got it with Zoom Phone-Basic license. Is there any idea what could cause the trouble? As mentioned above, we used the general list endpoint for the tests also, but the result is identically. Thankful for any help we can get!

---

<div class="post-metadata">

**Author:** ![Jens3](https://avatars.discourse-cdn.com/v4/letter/j/a87d85/32.png) [@Jens3](https://devforum.zoom.us/u/Jens3)\
**Post date:** [May 28, 2026, 7:36am UTC](https://devforum.zoom.us/t/list-auto-receptionists-responses-with-http-403/143752/5 "2026-05-28T07:36:33Z")

</div>

Step by Step we are getting closer. The User that owns the App has to get some additional Roles/Rights in order to call the endpoints:

User Management → Users → View  
User Management → Users → Edit (optional)  
Phone System Management → Auto Receptionists → View  
Phone System Management → Auto Receptionists → Edit

Phone System Management → View  
Phone System Management → Sites → View