Skip to main content

When to Use This

By default, Server-to-Server OAuth apps have access to all users in your Zoom account. Use custom roles and scopes to restrict Parable’s access to specific teams or departments.

​
Overview

This guide walks you through creating a restricted Zoom integration that can only access data for a defined subset of users. The approach involves four steps:

1. User Group

Group the users Parable should access

2. Custom Role

Create a role scoped to that group

3. Service Account

Create a dedicated service user

4. OAuth App

Create the app as the service user
Prerequisite: This guide assumes familiarity with the standard Server-to-Server OAuth setup. You’ll create a new, restricted app rather than modifying an existing one.

​
Setup Guide

1

Create a User Group

  1. Sign in to Zoom as an account owner or admin
  2. Go to User Management → Groups
  3. Click Add Group
  1. Click Add
  2. Navigate to User Management → Users
  3. Add target users to the new group
2

Create a Custom Role

  1. Go to User Management → Roles
  2. Click Add Role
  1. Go to Role Settings tab
  2. Enable the permissions your integration needs:
  1. Set the scope for each permission:
    • Click Edit in the Scope column
    • Select Custom Scope
    • Choose the Parable-Accessible-Users group
    • Click Save
You must set the scope individually for each permission you enable.
3

Create a Service Account

  1. Go to User Management → Users
  2. Click Add Users
  3. Create a dedicated service user:
  1. Find the new user in the list
  2. Click Edit next to their name
  3. Set User Role to Parable-Restricted-Role
  4. Click Save
The service user must have appropriate licenses to access the data types you need (e.g., Zoom Phone license for call logs).
4

Create the Server-to-Server OAuth App

You must log in as the service user to create the app. Log out of your admin account first.
  1. Log in to Zoom App Marketplace as parable-service@yourcompany.com
  2. Click Develop → Build App
  3. Select Server-to-Server OAuth → Create
  4. Name the app: Parable Restricted Integration
  5. Go to Scopes and add scopes matching your role permissions:
  1. Complete required fields and Activate the app
  2. Copy your credentials from App Credentials:
    • Account ID
    • Client ID
    • Client Secret