# OAuth server-to-server returning only "scope": "meeting:read:admin"

**URL:** <https://devforum.zoom.us/t/oauth-server-to-server-returning-only-scope-meetingadmin/89358>\
**Category:** Authentication\
**Tags:** server-to-server\
**Created:** [May 31, 2023, 11:19am UTC](https://devforum.zoom.us/t/oauth-server-to-server-returning-only-scope-meetingadmin/89358 "2023-05-31T11:19:11Z")\
**Posts on this page:** 8\
**Page:** 1

<div class="post-metadata">

**Author:** ![Hakkarainen](https://sea2.discourse-cdn.com/flex016/user_avatar/devforum.zoom.us/hakkarainen/32/15296_2.png) [@Hakkarainen](https://devforum.zoom.us/u/Hakkarainen)\
**Post date:** [May 31, 2023, 11:19am UTC](https://devforum.zoom.us/t/oauth-server-to-server-returning-only-scope-meetingadmin/89358/1 "2023-05-31T11:19:11Z")

</div>

**API Endpoint(s) and/or Zoom API Event(s)**  
([https://zoom.us/oauth/token?grant\_type=account\_credentials&account\_id={{Account\_ID}](https://zoom.us/oauth/token?grant_type=account_credentials&account_id=%7B%7BAccount_ID%7D)})\*

**Description**  
I have set up my app to have scopes to allow read-write on meetings, recordings, and user accounts. My account is our admin account.  
When I use Postman to request an access token, the token is returned successfully, but only includes the `"scope": "meeting:read:admin"`

---

<div class="post-metadata">

**Author:** ![gianni.zoom](https://sea2.discourse-cdn.com/flex016/user_avatar/devforum.zoom.us/gianni.zoom/32/32523_2.png) [@gianni.zoom](https://devforum.zoom.us/u/gianni.zoom)\
**Post date:** [May 31, 2023, 8:04pm UTC](https://devforum.zoom.us/t/oauth-server-to-server-returning-only-scope-meetingadmin/89358/2 "2023-05-31T20:04:50Z")

</div>

Hi @Hakkarainen ,

Did you add “scope”: “meeting:read:admin” before creating your access token and then added the other ones afterward?

Additionally, are you able to successfully make requests to the endpoints that require those scopes?

---

<div class="post-metadata">

**Author:** ![Hakkarainen](https://sea2.discourse-cdn.com/flex016/user_avatar/devforum.zoom.us/hakkarainen/32/15296_2.png) [@Hakkarainen](https://devforum.zoom.us/u/Hakkarainen)\
**Post date:** [May 31, 2023, 8:22pm UTC](https://devforum.zoom.us/t/oauth-server-to-server-returning-only-scope-meetingadmin/89358/4 "2023-05-31T20:22:04Z")

</div>

No. I followed the steps and created the scopes after creating the access token. I need to be able obtain a list of users so that I can find all meetings and recordings for everyone.

---

<div class="post-metadata">

**Author:** ![gianni.zoom](https://sea2.discourse-cdn.com/flex016/user_avatar/devforum.zoom.us/gianni.zoom/32/32523_2.png) [@gianni.zoom](https://devforum.zoom.us/u/gianni.zoom)\
**Post date:** [May 31, 2023, 8:52pm UTC](https://devforum.zoom.us/t/oauth-server-to-server-returning-only-scope-meetingadmin/89358/5 "2023-05-31T20:52:20Z")

</div>

> [@gianni.zoom](#):
>
> Additionally, are you able to successfully make requests to the endpoints that require those scopes?

Please answer the following.

Additionally if you’re not able to access the endpoints, re-authorize your app, generate a new token and then try querying those endpoints again.

---

<div class="post-metadata">

**Author:** ![Hakkarainen](https://sea2.discourse-cdn.com/flex016/user_avatar/devforum.zoom.us/hakkarainen/32/15296_2.png) [@Hakkarainen](https://devforum.zoom.us/u/Hakkarainen)\
**Post date:** [June 1, 2023, 3:02pm UTC](https://devforum.zoom.us/t/oauth-server-to-server-returning-only-scope-meetingadmin/89358/6 "2023-06-01T15:02:44Z")

</div>

I am able to use endpoints that require `meeting:read:admin`, but not other endpoints. As noted earlier, the call to get the access token ([https://zoom.us/oauth/token?grant\_type=account\_credentials&account\_id={{Account\_ID}](https://zoom.us/oauth/token?grant_type=account_credentials&account_id=%7B%7BAccount_ID%7D%7D)}) returns only `meeting:read:admin` even though I have specified other scopes and not `meeting:read:admin`

 ![image](https://us1.discourse-cdn.com/flex016/uploads/zoomdeveloper/original/3X/3/a/3adcad03331ca83b300029dacfdc8ad3929c8147.png)

---

<div class="post-metadata">

**Author:** ![Hakkarainen](https://sea2.discourse-cdn.com/flex016/user_avatar/devforum.zoom.us/hakkarainen/32/15296_2.png) [@Hakkarainen](https://devforum.zoom.us/u/Hakkarainen)\
**Post date:** [June 1, 2023, 7:53pm UTC](https://devforum.zoom.us/t/oauth-server-to-server-returning-only-scope-meetingadmin/89358/7 "2023-06-01T19:53:01Z")

</div>

Additionally, I did reauthorize the app and even regenerated the Client Secret. Still no joy, just ` "scope": "meeting:read:admin"`

---

<div class="post-metadata">

**Author:** ![Hakkarainen](https://sea2.discourse-cdn.com/flex016/user_avatar/devforum.zoom.us/hakkarainen/32/15296_2.png) [@Hakkarainen](https://devforum.zoom.us/u/Hakkarainen)\
**Post date:** [June 1, 2023, 9:01pm UTC](https://devforum.zoom.us/t/oauth-server-to-server-returning-only-scope-meetingadmin/89358/8 "2023-06-01T21:01:43Z")

</div>

I wish that I was confident in what I did to make it work, but now it does. I am getting the right scopes and can get the information from the endpoints that I need.  
My apologies for the false alarms. I’m now going to eat pudding.

---

<div class="post-metadata">

**Author:** ![gianni.zoom](https://sea2.discourse-cdn.com/flex016/user_avatar/devforum.zoom.us/gianni.zoom/32/32523_2.png) [@gianni.zoom](https://devforum.zoom.us/u/gianni.zoom)\
**Post date:** [June 2, 2023, 3:44pm UTC](https://devforum.zoom.us/t/oauth-server-to-server-returning-only-scope-meetingadmin/89358/9 "2023-06-02T15:44:49Z")

</div>

Okay I’m glad it’s resolved @Hakkarainen !
