# Retrieving zak token: Does not contain scopes

**URL:** <https://devforum.zoom.us/t/retrieving-zak-token-does-not-contain-scopes/77930>\
**Category:** Android\
**Created:** [October 26, 2022, 2:47pm UTC](https://devforum.zoom.us/t/retrieving-zak-token-does-not-contain-scopes/77930 "2022-10-26T14:47:19Z")\
**Posts on this page:** 3\
**Page:** 1

<div class="post-metadata">

**Author:** ![sha](https://sea2.discourse-cdn.com/flex016/user_avatar/devforum.zoom.us/sha/32/42317_2.png) [@sha](https://devforum.zoom.us/u/sha)\
**Post date:** [October 26, 2022, 2:47pm UTC](https://devforum.zoom.us/t/retrieving-zak-token-does-not-contain-scopes/77930/1 "2022-10-26T14:47:19Z")

</div>

I am using the current android sdk zoom-sdk-android-5.12.2.9109 and am following the guide to implement PKCE OAuth (mainly the iOS guide as the Android guide is missing some info).

I have registered an app with the scopes “meeting:write user\_zak:read” as i want the user to be able to create Zoom meetings from within my existing calendar application. The application is set to “intend to publish: no”, as i only want it as an integration.

I get an access token and refresh token with the requested scopes (“scope”:“meeting:write user\_zak:read”), but when i try to follow the next step and retrieve the zak, i get an error message:  
{“code”:4700,“message”:“Invalid access token, does not contain scopes: [user:write:admin, user:read:admin, user:read, user:write, user\_profile].”}

Do i have to add these scopes to my application registration, and if yes, why?

Edit: Or do i have to change the registration type and fill out this 24 pages google doc about our companys security process?

---

<div class="post-metadata">

**Author:** ![sha](https://sea2.discourse-cdn.com/flex016/user_avatar/devforum.zoom.us/sha/32/42317_2.png) [@sha](https://devforum.zoom.us/u/sha)\
**Post date:** [October 28, 2022, 11:43am UTC](https://devforum.zoom.us/t/retrieving-zak-token-does-not-contain-scopes/77930/2 "2022-10-28T11:43:15Z")

</div>

Issue was resolved by registering a third account 🤓

---

<div class="post-metadata">

**Author:** ![system](https://us1.discourse-cdn.com/flex016/uploads/zoomdeveloper/original/3X/6/1/614bdd549b610bbaa46ff934617683a02bdaa03c.png) [@system](https://devforum.zoom.us/u/system)\
**Post date:** [November 27, 2022, 9:43pm UTC](https://devforum.zoom.us/t/retrieving-zak-token-does-not-contain-scopes/77930/3 "2022-11-27T21:43:18Z")

</div>

Closed on November 27, 2022, 9:43pm UTC

This topic was automatically closed 30 days after the last reply. New replies are no longer allowed.