Reports API returns "[4711] missing report:read:admin" although all Report scopes are enabled (legacy scope unavailable)

API Endpoints I’ve Tried

GET /v2/report/meetings/{meetingUUID}/participants

GET /v2/report/meetings/{meetingID}/participants

Description

I am attempting to retrieve post-meeting participant attendance data (join time, leave time, duration) using the Reports API.

The API call is made using a Server-to-Server OAuth app integrated with Make (integromat). Other Zoom API endpoints (Meetings, Registrants) work correctly with the same app and token.

However, when calling the Reports endpoint, Zoom returns a scope error referencing a legacy scope that is no longer available in the Marketplace UI.

Please note: This is not a user-managed OAuth app; it is an account-level Server-to-Server OAuth app.

ERROR: [4711] Invalid access token, does not contain scopes:[report:read:admin]

How To Reproduce

1. Request: GET /v2/report/meetings/{meetingUUID}/participants?page_size=300

Headers: Authorization: Bearer {access_token}

(Using meeting UUID, URL-encoded as required.)

2. Authentication method / app type

  • OAuth app (Marketplace app)

  • App is active

  • Token reauthorized after scope changes

  • Authorizing user is an account admin

  • Account is Pro or higher

  • App type: Server-to-Server OAuth (account-level app), Activated

3. Scopes configuration

  • Legacy report:read:admin scope is not available in the Marketplace UI.

  • Only granular Report scopes are shown.

  • All available Report scopes have been enabled.

  • App changes saved and OAuth reauthorisation completed.

4. Observed behaviour

  • Reports endpoint returns “[4711] missing report:read:admin”

  • Other API endpoints function correctly with the same token.


Question

  1. Does GET /v2/report/meetings/{meetingUUID}/participants still internally require the legacy report:read:admin scope?

  2. If so, how should developers satisfy this requirement now that the scope is no longer selectable?

  3. Are granular Report scopes expected to map to report:read:admin, or is this endpoint restricted to a specific app type (e.g. Server-to-Server OAuth only)?

This appears to be a mismatch between the Reports API and the current granular scope model in the Marketplace.

Any help would be greatly appreciated.

Thanks you.