# OAuth Scope with API information for sub-account

**URL:** <https://devforum.zoom.us/t/oauth-scope-with-api-information-for-sub-account/103068>\
**Category:** Users and Groups\
**Tags:** api\
**Created:** [February 2, 2024, 10:54am UTC](https://devforum.zoom.us/t/oauth-scope-with-api-information-for-sub-account/103068 "2024-02-02T10:54:59Z")\
**Posts on this page:** 6\
**Page:** 1

<div class="post-metadata">

**Author:** ![zoom.dev1](https://avatars.discourse-cdn.com/v4/letter/z/ea5d25/32.png) [@zoom.dev1](https://devforum.zoom.us/u/zoom.dev1)\
**Post date:** [February 2, 2024, 10:54am UTC](https://devforum.zoom.us/t/oauth-scope-with-api-information-for-sub-account/103068/1 "2024-02-02T10:54:59Z")

</div>

\*\* /users/email\*\*  
_[Link the API endpoint.](https://developers.zoom.us/docs/api/rest/reference/user/methods/#operation/userEmail)_

**Description**  
We have an account level OAuth app that we use for our product and Zoom integration. One of our customer has enabled sub-account. The following is the setup:

- Master Account called Admin Account
- Sub-account of Admin Account called Child Account
- Admin Account has an OAuth Account-Level App
- App has the scope :  
1. View and manage sub account’s user information  
2. View and manage sub account’s user recordings  
3. View and manage sub account’s user meetings  
4. View all users’ contacts  
5. View all user information

When we send the GET call with the endpoint /users/abc@xyz.com, it is responding with  
**Error**  
Error Code 1001  
_User does not exist: [abc@xyz.com](mailto:abc@xyz.com)._

We are trying to understanding what scope or endpoint are we supposed to use to access sub-account information. The admin authorized the app and it functions correctly if the call is made for Admin Account.

Thanks in advance

---

<div class="post-metadata">

**Author:** ![gianni.zoom](https://sea2.discourse-cdn.com/flex016/user_avatar/devforum.zoom.us/gianni.zoom/32/32523_2.png) [@gianni.zoom](https://devforum.zoom.us/u/gianni.zoom)\
**Post date:** [February 2, 2024, 6:17pm UTC](https://devforum.zoom.us/t/oauth-scope-with-api-information-for-sub-account/103068/2 "2024-02-02T18:17:54Z")

</div>

Hi @zoom.dev1 ,

Here is the documentation on master account structure: [Master Account API](https://developers.zoom.us/docs/api/rest/master-account-apis/)

Master API endpoints are prepended with `/accounts/{accountID}` . The request body and responses mirror the standard Zoom API.

If the app and permissions are scoped correctly, then the correct endpoint should suffice 🙂

---

<div class="post-metadata">

**Author:** ![zoom.dev1](https://avatars.discourse-cdn.com/v4/letter/z/ea5d25/32.png) [@zoom.dev1](https://devforum.zoom.us/u/zoom.dev1)\
**Post date:** [February 5, 2024, 7:58am UTC](https://devforum.zoom.us/t/oauth-scope-with-api-information-for-sub-account/103068/4 "2024-02-05T07:58:23Z")

</div>

@gianni.zoom Thank you for the information. Maybe I should have added to the main question.

- Is there a way to do this **without** Master Account API? Through any account setup or scopes?

- If not, has this been always the case? Or these changes were made somewhere recently?

- Is it possible to create an OAuth app on the sub-account and use /users/email API endpoint?

Thank you for the assistance 🙂

---

<div class="post-metadata">

**Author:** ![gianni.zoom](https://sea2.discourse-cdn.com/flex016/user_avatar/devforum.zoom.us/gianni.zoom/32/32523_2.png) [@gianni.zoom](https://devforum.zoom.us/u/gianni.zoom)\
**Post date:** [February 5, 2024, 6:28pm UTC](https://devforum.zoom.us/t/oauth-scope-with-api-information-for-sub-account/103068/5 "2024-02-05T18:28:04Z")

</div>

Hi @zoom.dev1 ,

> [@zoom.dev1](#):
>
> Is there a way to do this **without** Master Account API? Through any account setup or scopes?

Nope if querying with master account auth, you have to use the master account endpoints.

> [@zoom.dev1](#):
>
> If not, has this been always the case? Or these changes were made somewhere recently?

Yes this has always been the case to the best of my knowledge 🙂

> [@zoom.dev1](#):
>
> Is it possible to create an OAuth app on the sub-account and use /users/email API endpoint?

Yes!

---

<div class="post-metadata">

**Author:** ![zoom.dev1](https://avatars.discourse-cdn.com/v4/letter/z/ea5d25/32.png) [@zoom.dev1](https://devforum.zoom.us/u/zoom.dev1)\
**Post date:** [February 5, 2024, 6:43pm UTC](https://devforum.zoom.us/t/oauth-scope-with-api-information-for-sub-account/103068/6 "2024-02-05T18:43:47Z")

</div>

@gianni.zoom  
Could you please share some docs on how to create OAuth App on the sub-account? Is it the same way as the master account? Or is there a different setup that we need to configure?

Thanks!

---

<div class="post-metadata">

**Author:** ![gianni.zoom](https://sea2.discourse-cdn.com/flex016/user_avatar/devforum.zoom.us/gianni.zoom/32/32523_2.png) [@gianni.zoom](https://devforum.zoom.us/u/gianni.zoom)\
**Post date:** [February 5, 2024, 8:43pm UTC](https://devforum.zoom.us/t/oauth-scope-with-api-information-for-sub-account/103068/7 "2024-02-05T20:43:29Z")

</div>

Hi @zoom.dev1 , it’s the same way.
