# OAuth: "Invalid access token, does not contain scopes: \[user:read, user:write\]"

**URL:** <https://devforum.zoom.us/t/oauth-invalid-access-token-does-not-contain-scopes-user-read-user-write/998>\
**Category:** API and Webhooks\
**Created:** [February 14, 2018, 8:20pm UTC](https://devforum.zoom.us/t/oauth-invalid-access-token-does-not-contain-scopes-user-read-user-write/998 "2018-02-14T20:20:17Z")\
**Posts on this page:** 5\
**Page:** 1

<div class="post-metadata">

**Author:** ![Philip\_Rousselle](https://avatars.discourse-cdn.com/v4/letter/p/e99b99/32.png) [@Philip\_Rousselle](https://devforum.zoom.us/u/Philip_Rousselle)\
**Post date:** [February 14, 2018, 8:20pm UTC](https://devforum.zoom.us/t/oauth-invalid-access-token-does-not-contain-scopes-user-read-user-write/998/1 "2018-02-14T20:20:17Z")

</div>

I’m working with the OAuth flow. I have an access token that works for&nbsp;

```
https://zoom.us/api/profile

```

but when I use it to call&nbsp;[https://api.zoom.us/v2/users/me](https://api.zoom.us/v2/users/me) I get the error&nbsp;“Invalid access token, does not contain scopes: [user:read, user:write].” The documentation says&nbsp;[https://api.zoom.us/v2/users/me](https://api.zoom.us/v2/users/me) supports the OAuth access token. I can’t find anything about how to specify or use scopes.

---

<div class="post-metadata">

**Author:** ![Zoom\_Developer](https://avatars.discourse-cdn.com/v4/letter/z/eb8c5e/32.png) [@Zoom\_Developer](https://devforum.zoom.us/u/Zoom_Developer)\
**Post date:** [February 14, 2018, 8:35pm UTC](https://devforum.zoom.us/t/oauth-invalid-access-token-does-not-contain-scopes-user-read-user-write/998/2 "2018-02-14T20:35:00Z")

</div>

Hi Philip,

&nbsp; &nbsp;You don’t have to specify the scopes but the default scope on /users/me is read only. Are you trying to modify the user profile or you are just doing a GET on /users/me ?&nbsp;

&nbsp;

Wei @ Zoom.&nbsp;&nbsp;

---

<div class="post-metadata">

**Author:** ![Philip\_Rousselle](https://avatars.discourse-cdn.com/v4/letter/p/e99b99/32.png) [@Philip\_Rousselle](https://devforum.zoom.us/u/Philip_Rousselle)\
**Post date:** [February 14, 2018, 8:45pm UTC](https://devforum.zoom.us/t/oauth-invalid-access-token-does-not-contain-scopes-user-read-user-write/998/3 "2018-02-14T20:45:57Z")

</div>

Just doing a vanilla GET. No headers except Authorization. I’m getting that same error on all the /v2/users/me/ APIs.

---

<div class="post-metadata">

**Author:** ![Zoom\_Developer](https://avatars.discourse-cdn.com/v4/letter/z/eb8c5e/32.png) [@Zoom\_Developer](https://devforum.zoom.us/u/Zoom_Developer)\
**Post date:** [February 15, 2018, 4:24am UTC](https://devforum.zoom.us/t/oauth-invalid-access-token-does-not-contain-scopes-user-read-user-write/998/4 "2018-02-15T04:24:36Z")

</div>

Philip, please delete the app in our developer site and create it again. If you still see the same issue,&nbsp;can you please send your postman scripts to “[developersupport@zoom.us](mailto:developersupport@zoom.us)” - our engineering wants to take a look.&nbsp;

Thanks

Wei

---

<div class="post-metadata">

**Author:** ![Philip\_Rousselle](https://avatars.discourse-cdn.com/v4/letter/p/e99b99/32.png) [@Philip\_Rousselle](https://devforum.zoom.us/u/Philip_Rousselle)\
**Post date:** [February 15, 2018, 6:55pm UTC](https://devforum.zoom.us/t/oauth-invalid-access-token-does-not-contain-scopes-user-read-user-write/998/5 "2018-02-15T18:55:08Z")

</div>

That solved the problem. Thanks.