# No permission when trying to access https://api.zoom.us/v2/roles

**URL:** <https://devforum.zoom.us/t/no-permission-when-trying-to-access-https-api-zoom-us-v2-roles/107005>\
**Category:** API and Webhooks\
**Created:** [April 2, 2024, 12:42pm UTC](https://devforum.zoom.us/t/no-permission-when-trying-to-access-https-api-zoom-us-v2-roles/107005 "2024-04-02T12:42:26Z")\
**Posts on this page:** 5\
**Page:** 1

<div class="post-metadata">

**Author:** ![bennyb](https://sea2.discourse-cdn.com/flex016/user_avatar/devforum.zoom.us/bennyb/32/58192_2.png) [@bennyb](https://devforum.zoom.us/u/bennyb)\
**Post date:** [April 2, 2024, 12:42pm UTC](https://devforum.zoom.us/t/no-permission-when-trying-to-access-https-api-zoom-us-v2-roles/107005/1 "2024-04-02T12:42:26Z")

</div>

Hi,

I am trying to retrieve the list of roles using the [api.zoom.us/v2/roles](http://api.zoom.us/v2/roles) API.  
My app has the relevant scope (i.e., role:master), however, I get the following response:  
{  
“code”: 200,  
“message”: “No permission.”  
}

Any idea why does it happen and how to resolve it?

---

<div class="post-metadata">

**Author:** ![gianni.zoom](https://sea2.discourse-cdn.com/flex016/user_avatar/devforum.zoom.us/gianni.zoom/32/32523_2.png) [@gianni.zoom](https://devforum.zoom.us/u/gianni.zoom)\
**Post date:** [April 2, 2024, 3:04pm UTC](https://devforum.zoom.us/t/no-permission-when-trying-to-access-https-api-zoom-us-v2-roles/107005/2 "2024-04-02T15:04:27Z")

</div>

@bennyb ,

Was this endpoint working previously for you in the same way you’re accessing now? If so, when did this behavior change?

Additionally, do you have a [master-sub account](https://developers.zoom.us/docs/api/rest/master-account-apis/) set up? If not, please adjust the endpoint based on the guidance in the hyperlinked document.

---

<div class="post-metadata">

**Author:** ![bennyb](https://sea2.discourse-cdn.com/flex016/user_avatar/devforum.zoom.us/bennyb/32/58192_2.png) [@bennyb](https://devforum.zoom.us/u/bennyb)\
**Post date:** [April 2, 2024, 3:54pm UTC](https://devforum.zoom.us/t/no-permission-when-trying-to-access-https-api-zoom-us-v2-roles/107005/4 "2024-04-02T15:54:17Z")

</div>

@gianni.zoom Thanks for the prompt reply.  
I don’t have sub-account.  
This is a new application that I’ve set up recently, however, it is based on a legacy code that used the old JWT authentication.  
Other calls to the API such as: [https://api.zoom.us/v2/users](https://api.zoom.us/v2/users) work fine.

---

<div class="post-metadata">

**Author:** ![gianni.zoom](https://sea2.discourse-cdn.com/flex016/user_avatar/devforum.zoom.us/gianni.zoom/32/32523_2.png) [@gianni.zoom](https://devforum.zoom.us/u/gianni.zoom)\
**Post date:** [May 6, 2024, 8:17pm UTC](https://devforum.zoom.us/t/no-permission-when-trying-to-access-https-api-zoom-us-v2-roles/107005/5 "2024-05-06T20:17:03Z")

</div>

Hi @bennyb , what type of app are you using now that JWT has been deprecated? Server to Server or Unified Build Flow app?

Additionally, if you do not have a master-sub account set up, you would not have the option to add master scopes unless something has changed with your account and needs to be re-conconfigured. It may be causing issues with querying.

Here are [the updated granular scopes:](https://developers.zoom.us/docs/api/rest/reference/account/methods/#operation/roles) can you please confirm the list of scopes you have applied? I want to compare if you have the old or new scopes and which ones exactly.

---

<div class="post-metadata">

**Author:** ![system](https://us1.discourse-cdn.com/flex016/uploads/zoomdeveloper/original/3X/6/1/614bdd549b610bbaa46ff934617683a02bdaa03c.png) [@system](https://devforum.zoom.us/u/system)\
**Post date:** [May 10, 2025, 11:53am UTC](https://devforum.zoom.us/t/no-permission-when-trying-to-access-https-api-zoom-us-v2-roles/107005/6 "2025-05-10T11:53:15Z")

</div>

This topic was automatically closed 368 days after the last reply. New replies are no longer allowed.