# Zoom Government App: You cannot authorize App

**URL:** <https://devforum.zoom.us/t/zoom-government-app-you-cannot-authorize-app/82196>\
**Category:** Zoom for Government\
**Tags:** marketplace\
**Created:** [January 26, 2023, 10:06pm UTC](https://devforum.zoom.us/t/zoom-government-app-you-cannot-authorize-app/82196 "2023-01-26T22:06:50Z")\
**Posts on this page:** 13\
**Page:** 1

<div class="post-metadata">

**Author:** ![SongZhang](https://avatars.discourse-cdn.com/v4/letter/s/ee59a6/32.png) [@SongZhang](https://devforum.zoom.us/u/SongZhang)\
**Post date:** [January 26, 2023, 10:06pm UTC](https://devforum.zoom.us/t/zoom-government-app-you-cannot-authorize-app/82196/1 "2023-01-26T22:06:50Z")

</div>

The issue is found with Zoom government.

We create an OAuth App on [marketplace.zoomgov.com](http://marketplace.zoomgov.com).  
The zoom government account has been assigned as a member of Admin role.  
When the account is under OAuth authorization, we get the following error (snapshot attached):

You cannot authorize App  
You cannot install the app because you don’t have the required permissions. Please contact y our IT administrator for permission and try again.

This is the first time we use Zoom government account for the test.  
We used to use normal Zoom account and we don’t have the problem.  
We compare the OAuth app on government marketplace and the old one, and they are the same.

For some reason, the forum doesn’t allow me to attach(embed) the snapshot.

After some more investigation by comparing the zoomus App and Zoom Government App, I find the problem.  
According to the troubleshooting tips “scenario 4” in the following link

> **["You cannot authorize the app" error](https://devsupport.zoom.us/hc/en-us/articles/360059617312--You-cannot-authorize-the-app-error#:~:text=To%20fix%20it%3A%20Have%20your,administrator%20to%20install%20this%20app.%22)**
>
> There are a few scenarios that can cause the "You cannot authorize the app error." Continue reading to find your scenario and the steps to install the app.
> Scenarios:
> Scenario 1. "An account admin ...

For the Zoom Government App  
{zoom government marketplace}/apphelp/{AppID}  
“View all users history and channels” maps to “Chat Management - Chat history” and has “Privilege missing”  
However, there is no “Chat Management - Chat history” within the Admin Role

The Zoom us App  
{zoom us marketplace}/apphelp/{AppID}  
“View all users history and channels” maps to “-”, so it doesn’t have this problem. Although the Admin Role doesn’t have the “Chat Management - Chat history” either.

---

<div class="post-metadata">

**Author:** ![elisa.zoom](https://sea2.discourse-cdn.com/flex016/user_avatar/devforum.zoom.us/elisa.zoom/32/47836_2.png) [@elisa.zoom](https://devforum.zoom.us/u/elisa.zoom)\
**Post date:** [February 1, 2023, 6:23pm UTC](https://devforum.zoom.us/t/zoom-government-app-you-cannot-authorize-app/82196/2 "2023-02-01T18:23:44Z")

</div>

Hi @SongZhang  
Thanks for reaching out to the Zoom Developer Forum, I am happy to help here!  
Have you been able to work on this issue or do you still some assistance?

Best,  
Elisa

---

<div class="post-metadata">

**Author:** ![SongZhang](https://avatars.discourse-cdn.com/v4/letter/s/ee59a6/32.png) [@SongZhang](https://devforum.zoom.us/u/SongZhang)\
**Post date:** [February 1, 2023, 6:45pm UTC](https://devforum.zoom.us/t/zoom-government-app-you-cannot-authorize-app/82196/3 "2023-02-01T18:45:55Z")

</div>

Thank you for the help!

I need to remove this scope “imchat:read:admin” from the Zoom government OAuth App to pass the OAuth2 authorization.  
This scope is used by a deprecated API, however, I don’t know why Zoom government still provide the user this option in the scope settings. The problem is once you select this scope you can’t pass the OAuth2 authorization.

---

<div class="post-metadata">

**Author:** ![elisa.zoom](https://sea2.discourse-cdn.com/flex016/user_avatar/devforum.zoom.us/elisa.zoom/32/47836_2.png) [@elisa.zoom](https://devforum.zoom.us/u/elisa.zoom)\
**Post date:** [February 2, 2023, 3:16pm UTC](https://devforum.zoom.us/t/zoom-government-app-you-cannot-authorize-app/82196/4 "2023-02-02T15:16:27Z")

</div>

Thanks for sharing more details with me @SongZhang  
So when you remove the scope from your app, you get an error.?  
Is this app published in the Marketplace? or is an internal app?

---

<div class="post-metadata">

**Author:** ![SongZhang](https://avatars.discourse-cdn.com/v4/letter/s/ee59a6/32.png) [@SongZhang](https://devforum.zoom.us/u/SongZhang)\
**Post date:** [February 2, 2023, 3:55pm UTC](https://devforum.zoom.us/t/zoom-government-app-you-cannot-authorize-app/82196/5 "2023-02-02T15:55:15Z")

</div>

It is an internal app used for our tests.  
When I remove the scope from the app, it is working for the OAuth authorization.  
If I keep the scope from the app, the OAuth2 authorization fails  
"You cannot install the app because you don’t have the required permissions… "

This is found with Zoom Gov app, I have a Zoom US app that selects the same scope and it is good.

---

<div class="post-metadata">

**Author:** ![elisa.zoom](https://sea2.discourse-cdn.com/flex016/user_avatar/devforum.zoom.us/elisa.zoom/32/47836_2.png) [@elisa.zoom](https://devforum.zoom.us/u/elisa.zoom)\
**Post date:** [February 3, 2023, 4:52pm UTC](https://devforum.zoom.us/t/zoom-government-app-you-cannot-authorize-app/82196/6 "2023-02-03T16:52:13Z")

</div>

Interesting @SongZhang  
I will go ahead and send you a private message so I can take a look into this.  
Best,  
Elisa

---

<div class="post-metadata">

**Author:** ![SongZhang](https://avatars.discourse-cdn.com/v4/letter/s/ee59a6/32.png) [@SongZhang](https://devforum.zoom.us/u/SongZhang)\
**Post date:** [February 6, 2023, 5:04pm UTC](https://devforum.zoom.us/t/zoom-government-app-you-cannot-authorize-app/82196/7 "2023-02-06T17:04:13Z")

</div>

![image](https://us1.discourse-cdn.com/flex016/uploads/zoomdeveloper/original/3X/0/9/091fa68e16844cb731f5ff3eee0b3b784cc3ef2a.png)

---

<div class="post-metadata">

**Author:** ![SongZhang](https://avatars.discourse-cdn.com/v4/letter/s/ee59a6/32.png) [@SongZhang](https://devforum.zoom.us/u/SongZhang)\
**Post date:** [February 6, 2023, 5:05pm UTC](https://devforum.zoom.us/t/zoom-government-app-you-cannot-authorize-app/82196/8 "2023-02-06T17:05:29Z")

</div>

Refer to the above snapshot on App Scopes selection.  
For Zoom Gov, if I select /imchat:read:admin for the App, the App will fail the OAuth2 authorization. However, it is good for Zoom US App. I suspect it is due to the corresponding API is a deprecated API.

---

<div class="post-metadata">

**Author:** ![SongZhang](https://avatars.discourse-cdn.com/v4/letter/s/ee59a6/32.png) [@SongZhang](https://devforum.zoom.us/u/SongZhang)\
**Post date:** [February 6, 2023, 5:07pm UTC](https://devforum.zoom.us/t/zoom-government-app-you-cannot-authorize-app/82196/9 "2023-02-06T17:07:23Z")

</div>

![image](https://us1.discourse-cdn.com/flex016/uploads/zoomdeveloper/original/3X/2/4/2430185447972a385045ec984ec3d006ac96578c.png)

---

<div class="post-metadata">

**Author:** ![elisa.zoom](https://sea2.discourse-cdn.com/flex016/user_avatar/devforum.zoom.us/elisa.zoom/32/47836_2.png) [@elisa.zoom](https://devforum.zoom.us/u/elisa.zoom)\
**Post date:** [February 7, 2023, 9:23pm UTC](https://devforum.zoom.us/t/zoom-government-app-you-cannot-authorize-app/82196/10 "2023-02-07T21:23:30Z")

</div>

Thanks for sharing more details with me @SongZhang  
If you are not using that scope, please remove it from your app so you do not run into the Oauth error

---

<div class="post-metadata">

**Author:** ![SongZhang](https://avatars.discourse-cdn.com/v4/letter/s/ee59a6/32.png) [@SongZhang](https://devforum.zoom.us/u/SongZhang)\
**Post date:** [February 7, 2023, 9:42pm UTC](https://devforum.zoom.us/t/zoom-government-app-you-cannot-authorize-app/82196/11 "2023-02-07T21:42:56Z")

</div>

I know if I am not using the scope, I need to remove it from my app.  
My question is why it is there and apparently it will fail the OAuth2 once selected. It shouldn’t appear on the government app scope selection.

---

<div class="post-metadata">

**Author:** ![elisa.zoom](https://sea2.discourse-cdn.com/flex016/user_avatar/devforum.zoom.us/elisa.zoom/32/47836_2.png) [@elisa.zoom](https://devforum.zoom.us/u/elisa.zoom)\
**Post date:** [February 8, 2023, 2:14pm UTC](https://devforum.zoom.us/t/zoom-government-app-you-cannot-authorize-app/82196/12 "2023-02-08T14:14:24Z")

</div>

@SongZhang  
As it is a deprecated scope it should not appear. Let me reach out to the Engineering team to ask about this issue and will come back to you  
Best,  
Elisa

---

<div class="post-metadata">

**Author:** ![SongZhang](https://avatars.discourse-cdn.com/v4/letter/s/ee59a6/32.png) [@SongZhang](https://devforum.zoom.us/u/SongZhang)\
**Post date:** [February 8, 2023, 9:11pm UTC](https://devforum.zoom.us/t/zoom-government-app-you-cannot-authorize-app/82196/13 "2023-02-08T21:11:16Z")

</div>

Thank you! Please help close the issue.
