# Unable to make GET request for /users/{userId}/webinars, invalid scope

**URL:** <https://devforum.zoom.us/t/unable-to-make-get-request-for-users-userid-webinars-invalid-scope/6434>\
**Category:** API and Webhooks\
**Created:** [October 28, 2019, 3:50pm UTC](https://devforum.zoom.us/t/unable-to-make-get-request-for-users-userid-webinars-invalid-scope/6434 "2019-10-28T15:50:57Z")\
**Posts on this page:** 3\
**Page:** 1

<div class="post-metadata">

**Author:** ![xrd](https://sea2.discourse-cdn.com/flex016/user_avatar/devforum.zoom.us/xrd/32/2210_2.png) [@xrd](https://devforum.zoom.us/u/xrd)\
**Post date:** [October 28, 2019, 3:50pm UTC](https://devforum.zoom.us/t/unable-to-make-get-request-for-users-userid-webinars-invalid-scope/6434/1 "2019-10-28T15:50:57Z")

</div>

**Description/Error**

I’m attempting to make a GET request and get the list of webinars. I’m using this sample code, slightly modified (I just changed .get(…/users/me) to .get(…/users/{MyUserId}/webinars)).

> <https://github.com/zoom/zoom-oauth-sample-app/blob/master/index.js>

When I try this, I get back this error message:

```
{
  "code": 4700,
  "message": "Invalid access token, does not contain scopes: [zms:webinar:write, webinar:write:admin, webinar:read:admin, zms:webinar:read]"
}

```

I added those scopes when I created my OAuth application:

webinar:read  
webinar:write

But, it seems strange that the API responds saying I need `zms:webinar:write, webinar:write:admin, webinar:read:admin, zms:webinar:read`.

What is the zms:webinar:read scope, and how is this different than webinar:read?

My account is definitely “PRO” and I scheduled a webinar.

**Which Endpoint/s?**

[https://api.zoom.us/v2/users/{myUserId}/webinars](https://api.zoom.us/v2/users/%7BmyUserId%7D/webinars)

 ![Screenshot%20from%202019-10-28%2008-50-07](https://us1.discourse-cdn.com/flex016/uploads/zoomdeveloper/original/2X/e/e823b73d5c2c4417c0f83e749f18bd253c6fa36a.png)

---

<div class="post-metadata">

**Author:** ![tommy](https://sea2.discourse-cdn.com/flex016/user_avatar/devforum.zoom.us/tommy/32/72769_2.png) [@tommy](https://devforum.zoom.us/u/tommy)\
**Post date:** [October 28, 2019, 9:10pm UTC](https://devforum.zoom.us/t/unable-to-make-get-request-for-users-userid-webinars-invalid-scope/6434/2 "2019-10-28T21:10:30Z")

</div>

Hey @xrd, thanks for posting and using Zoom!

I am guessing your OAuth app is User Level. In that case you need to use the `me` keyword instead of the `{{userID}}` to call the User Level APIs.

> **[OAuth with Zoom - OAuth - Authorization - Documentation](https://marketplace.zoom.us/docs/guides/authorization/oauth/oauth-with-zoom#me-context)**
>
> OAuth with Zoom
> 
> 
> 
> Below are examples of how to send requests for Access Tokens and handle responses for OAuth app authentication and authorization with...

Let me know if that works! 🙂

Thanks,  
Tommy

---

<div class="post-metadata">

**Author:** ![DeveloperBot](https://sea2.discourse-cdn.com/flex016/user_avatar/devforum.zoom.us/developerbot/32/12632_2.png) [@DeveloperBot](https://devforum.zoom.us/u/DeveloperBot)\
**Post date:** [August 21, 2020, 7:01pm UTC](https://devforum.zoom.us/t/unable-to-make-get-request-for-users-userid-webinars-invalid-scope/6434/3 "2020-08-21T19:01:51Z")

</div>

Closed on August 21, 2020, 7:01pm UTC