# OAuth App Sopes - access control **URL:** \ **Category:** Marketplace Admins\ **Created:** [June 29, 2022, 1:18am UTC](https://devforum.zoom.us/t/oauth-app-sopes-access-control/71347 "2022-06-29T01:18:57Z")\ **Posts on this page:** 7\ **Page:** 1
**Author:** ![zmalay](https://sea2.discourse-cdn.com/flex016/user_avatar/devforum.zoom.us/zmalay/32/38905_2.png) [@zmalay](https://devforum.zoom.us/u/zmalay)\ **Post date:** [June 29, 2022, 1:18am UTC](https://devforum.zoom.us/t/oauth-app-sopes-access-control/71347/1 "2022-06-29T01:18:57Z")
I am setting up an integration with Rainfocus to allow Zoom meetings and webinars to be created from their event management platform in our account. I only want them to have access to Zoom meeting/Webinar data created from their platform, but not data from all meeting conducted on our Zoom account Currently they are requesting: meeting:write:admin webinar:write:admin user:read:admin report:read:admin Question; 1. What are the right scopes for allowing their platform to Create meetings in our account and collect user and reporting data from those meetings, without accessing all user data? Thanks ---
**Author:** ![donte.zoom](https://sea2.discourse-cdn.com/flex016/user_avatar/devforum.zoom.us/donte.zoom/32/24412_2.png) [@donte.zoom](https://devforum.zoom.us/u/donte.zoom)\ **Post date:** [June 29, 2022, 1:57am UTC](https://devforum.zoom.us/t/oauth-app-sopes-access-control/71347/2 "2022-06-29T01:57:41Z")
@zmalay , Welcome to the Developer Forum ! You’ll want to give read access for the user and report scopes and write access for creating meetings. Please see our OAuth help documentation which offer detailed explanation of the OAuth scopes > **[OAuth Scopes](https://marketplace.zoom.us/docs/guides/auth/oauth/oauth-scopes/#recording-scopes)** > > The Zoom Developer Platform is an open platform that allows third-party developers to build applications and integrations upon Zoom’s video-first unified communications platform. ---
**Author:** ![zmalay](https://sea2.discourse-cdn.com/flex016/user_avatar/devforum.zoom.us/zmalay/32/38905_2.png) [@zmalay](https://devforum.zoom.us/u/zmalay)\ **Post date:** [June 29, 2022, 2:07am UTC](https://devforum.zoom.us/t/oauth-app-sopes-access-control/71347/3 "2022-06-29T02:07:35Z")
understood, as I have read this document. Rainfocus is requesting Admin Level scope access, would it be better to give them user level scope? Example: meeting:write webinar:write user:read report:read Would this limit them to only meeting they create as a single user? ---
**Author:** ![zmalay](https://sea2.discourse-cdn.com/flex016/user_avatar/devforum.zoom.us/zmalay/32/38905_2.png) [@zmalay](https://devforum.zoom.us/u/zmalay)\ **Post date:** [June 29, 2022, 3:00am UTC](https://devforum.zoom.us/t/oauth-app-sopes-access-control/71347/4 "2022-06-29T03:00:34Z")
I just noticed in the documentation that these scopes are not available: user:read report:read And, although meeting:write & webinar:write are in the documentation, they are not available options in the OAuth APP. ---
**Author:** ![donte.zoom](https://sea2.discourse-cdn.com/flex016/user_avatar/devforum.zoom.us/donte.zoom/32/24412_2.png) [@donte.zoom](https://devforum.zoom.us/u/donte.zoom)\ **Post date:** [June 30, 2022, 4:54pm UTC](https://devforum.zoom.us/t/oauth-app-sopes-access-control/71347/5 "2022-06-30T16:54:24Z")
@zmalay Apologies for the confusion, there is user: read but not admin: read scope. No user-level scopes for reports. Only account or admins apps can access report data. ![Screen Shot 2022-06-30 at 12.20.58 PM](https://us1.discourse-cdn.com/flex016/uploads/zoomdeveloper/original/3X/f/8/f8fe846b589df00278bb3caa6116c8499c05d4d1.png) ![Screen Shot 2022-06-30 at 12.55.22 PM](https://us1.discourse-cdn.com/flex016/uploads/zoomdeveloper/original/3X/7/0/708ba247986e21e213eea923882f04d6fbc5e07a.png) Currently, the OAuth scopes do not support the kind of granularity where the App will only have access to Zoom meeting/Webinar data created from their platform. If granted the scope access, the App will have access to all meetings conducted on your Zoom account. ---
**Author:** ![zmalay](https://sea2.discourse-cdn.com/flex016/user_avatar/devforum.zoom.us/zmalay/32/38905_2.png) [@zmalay](https://devforum.zoom.us/u/zmalay)\ **Post date:** [June 30, 2022, 8:01pm UTC](https://devforum.zoom.us/t/oauth-app-sopes-access-control/71347/6 "2022-06-30T20:01:58Z")
ok thank you. I did notice that, and i noticed that I didnt have any user level options for meeting:write or webinar:write. apparently, this is due to the “account-level” OAuth APP is there away to change this? or would I need to create another app? ---
**Author:** ![donte.zoom](https://sea2.discourse-cdn.com/flex016/user_avatar/devforum.zoom.us/donte.zoom/32/24412_2.png) [@donte.zoom](https://devforum.zoom.us/u/donte.zoom)\ **Post date:** [June 30, 2022, 8:44pm UTC](https://devforum.zoom.us/t/oauth-app-sopes-access-control/71347/7 "2022-06-30T20:44:33Z")
@zmalay, Correct, please see screenshots of user-managed OAuth scopes. # Webinar ![Screen Shot 2022-06-30 at 4.43.26 PM](https://us1.discourse-cdn.com/flex016/uploads/zoomdeveloper/original/3X/d/e/de335c5e07bcd3c776909a9186469bff8fd3c4a2.png) # meeting ![Screen Shot 2022-06-30 at 4.43.37 PM](https://us1.discourse-cdn.com/flex016/uploads/zoomdeveloper/original/3X/e/7/e70fda86c85aaae11295731fddbbe847d3e0e3f0.png)