# Missing scope when creating JWT application

**URL:** <https://devforum.zoom.us/t/missing-scope-when-creating-jwt-application/20203>\
**Category:** API and Webhooks\
**Created:** [June 3, 2020, 10:40pm UTC](https://devforum.zoom.us/t/missing-scope-when-creating-jwt-application/20203 "2020-06-03T22:40:07Z")\
**Posts on this page:** 5\
**Page:** 1

<div class="post-metadata">

**Author:** ![heidi.zh.n](https://sea2.discourse-cdn.com/flex016/user_avatar/devforum.zoom.us/heidi.zh.n/32/2906_2.png) [@heidi.zh.n](https://devforum.zoom.us/u/heidi.zh.n)\
**Post date:** [June 3, 2020, 10:40pm UTC](https://devforum.zoom.us/t/missing-scope-when-creating-jwt-application/20203/1 "2020-06-03T22:40:07Z")

</div>

Hello!

When I create an OAuth App, there is “Scope” setting to control what the app can access and do. See the attachment.  
 ![Screen Shot 2020-06-03 at 3.31.24 PM](https://us1.discourse-cdn.com/flex016/uploads/zoomdeveloper/original/2X/c/cb70e7c1dd0804ccfa267994db9301b9839a15cf.png)

 ![Screen Shot 2020-06-03 at 3.31.06 PM](https://us1.discourse-cdn.com/flex016/uploads/zoomdeveloper/original/2X/e/e9f6c7e077110e50066f95f1df18408915a866e6.png)

When I create a JWT app, there is no such setting for JWT app. See the screenshot. I wonder why this setting is missing from JWT app. It is kind of security concern that a JWT app can do anything without way to constrain it.  
 ![Screen Shot 2020-06-03 at 3.30.10 PM](https://us1.discourse-cdn.com/flex016/uploads/zoomdeveloper/original/2X/2/2f54d7870eed1db72f9299c8fabfddb871baafad.png)

---

<div class="post-metadata">

**Author:** ![heidi.zh.n](https://sea2.discourse-cdn.com/flex016/user_avatar/devforum.zoom.us/heidi.zh.n/32/2906_2.png) [@heidi.zh.n](https://devforum.zoom.us/u/heidi.zh.n)\
**Post date:** [June 5, 2020, 4:16pm UTC](https://devforum.zoom.us/t/missing-scope-when-creating-jwt-application/20203/2 "2020-06-05T16:16:25Z")

</div>

Hello! Zoom team,

Can you help me on this?

---

<div class="post-metadata">

**Author:** ![heidi.zh.n](https://sea2.discourse-cdn.com/flex016/user_avatar/devforum.zoom.us/heidi.zh.n/32/2906_2.png) [@heidi.zh.n](https://devforum.zoom.us/u/heidi.zh.n)\
**Post date:** [June 8, 2020, 3:35pm UTC](https://devforum.zoom.us/t/missing-scope-when-creating-jwt-application/20203/3 "2020-06-08T15:35:32Z")

</div>

NVM.

I close this post since it seems that it is a feature that JWT doesn’t have scope.

---

<div class="post-metadata">

**Author:** ![michael.zoom](https://sea2.discourse-cdn.com/flex016/user_avatar/devforum.zoom.us/michael.zoom/32/37213_2.png) [@michael.zoom](https://devforum.zoom.us/u/michael.zoom)\
**Post date:** [June 11, 2020, 4:15pm UTC](https://devforum.zoom.us/t/missing-scope-when-creating-jwt-application/20203/4 "2020-06-11T16:15:24Z")

</div>

Hi @heidi.zh.n, this is correct - JWT apps do not have restricted scopes. These apps are not tied to users, and are account-level credentials with access to any user on the account.

---

<div class="post-metadata">

**Author:** ![DeveloperBot](https://sea2.discourse-cdn.com/flex016/user_avatar/devforum.zoom.us/developerbot/32/12632_2.png) [@DeveloperBot](https://devforum.zoom.us/u/DeveloperBot)\
**Post date:** [August 21, 2020, 9:59pm UTC](https://devforum.zoom.us/t/missing-scope-when-creating-jwt-application/20203/5 "2020-08-21T21:59:50Z")

</div>

Closed on August 21, 2020, 9:59pm UTC