# Server to Server OAuth: Scopes missing

**URL:** <https://devforum.zoom.us/t/server-to-server-oauth-scopes-missing/92879>\
**Category:** API and Webhooks\
**Created:** [August 3, 2023, 9:37am UTC](https://devforum.zoom.us/t/server-to-server-oauth-scopes-missing/92879 "2023-08-03T09:37:41Z")\
**Posts on this page:** 4\
**Page:** 1

<div class="post-metadata">

**Author:** ![agoroncy](https://sea2.discourse-cdn.com/flex016/user_avatar/devforum.zoom.us/agoroncy/32/50767_2.png) [@agoroncy](https://devforum.zoom.us/u/agoroncy)\
**Post date:** [August 3, 2023, 9:37am UTC](https://devforum.zoom.us/t/server-to-server-oauth-scopes-missing/92879/1 "2023-08-03T09:37:41Z")

</div>

We just try to migrate from JWT to server to server oauth for the Zoom integration in Moodle. But Moodle is missing some scopes:  
Connection failed: Invalid access token, does not contain scopes: [user:write:admin, user:read:admin, user:read, user:write]

When adding scopes i can choose between these three scopes and activated user:read:admin and user:write:admin

user:master  
user:read:admin  
user:write:admin

But user:read and user:write are still missing.

It’s an account level app and my account is the owner.

The Zoom Plugin for moodle is up-to-date

Best  
Andreas

---

<div class="post-metadata">

**Author:** ![sandor.antal](https://avatars.discourse-cdn.com/v4/letter/s/59ef9b/32.png) [@sandor.antal](https://devforum.zoom.us/u/sandor.antal)\
**Post date:** [August 4, 2023, 3:43am UTC](https://devforum.zoom.us/t/server-to-server-oauth-scopes-missing/92879/2 "2023-08-04T03:43:50Z")

</div>

I believe the user:read, user:write scopes are valid for user managed level zoom apps.

---

<div class="post-metadata">

**Author:** ![agoroncy](https://sea2.discourse-cdn.com/flex016/user_avatar/devforum.zoom.us/agoroncy/32/50767_2.png) [@agoroncy](https://devforum.zoom.us/u/agoroncy)\
**Post date:** [August 4, 2023, 9:01am UTC](https://devforum.zoom.us/t/server-to-server-oauth-scopes-missing/92879/3 "2023-08-04T09:01:05Z")

</div>

I didn’t had the rights for editing Server-to-server OAuth Apps as an owner. I gave the permissions to an admin role and made a new app. Now it works fine.

---

<div class="post-metadata">

**Author:** ![system](https://us1.discourse-cdn.com/flex016/uploads/zoomdeveloper/original/3X/6/1/614bdd549b610bbaa46ff934617683a02bdaa03c.png) [@system](https://devforum.zoom.us/u/system)\
**Post date:** [August 7, 2024, 12:37am UTC](https://devforum.zoom.us/t/server-to-server-oauth-scopes-missing/92879/4 "2024-08-07T00:37:26Z")

</div>

This topic was automatically closed 368 days after the last reply. New replies are no longer allowed.