Hi all,
We are exploring using the Zoom API for integrations/workflows involving user recordings in our org.
Current issue
From what we’ve seen:
-
Zoom roles define permissions
-
Groups are used for scoping
-
When permissions are scoped to a group, users in that group may be able to access each other’s recordings
This behaviour doesn’t meet our requirements.
Requirement
We need a model where:
-
A user can authenticate and access only their own recordings
-
No cross-user visibility is possible
-
No account-wide or admin-level access is required
Question
Is it possible in Zoom to:
-
Enforce true per-user scoped API access (i.e. access only to the authenticated user’s recordings)?
-
Or is the roles + groups model limited to group-level scoping?
If unsupported, what’s the recommended secure approach?
Thanks all!