Skip to main content
  • Setup
  • Reference

When to Use This

By default, Server-to-Server OAuth apps have access to all users in your Zoom account. Use custom roles and scopes to restrict Parable’s access to specific teams or departments.

Overview

This guide walks you through creating a restricted Zoom integration that can only access data for a defined subset of users. The approach involves four steps:

1. User Group

Group the users Parable should access

2. Custom Role

Create a role scoped to that group

3. Service Account

Create a dedicated service user

4. OAuth App

Create the app as the service user
Prerequisite: This guide assumes familiarity with the standard Server-to-Server OAuth setup. You’ll create a new, restricted app rather than modifying an existing one.

Setup Guide

1

Create a User Group

  1. Sign in to Zoom as an account owner or admin
  2. Go to User ManagementGroups
  3. Click Add Group
FieldValue
Group NameParable-Accessible-Users
DescriptionUsers visible to Parable integration
  1. Click Add
  2. Navigate to User ManagementUsers
  3. Add target users to the new group
2

Create a Custom Role

  1. Go to User ManagementRoles
  2. Click Add Role
FieldValue
Role NameParable-Restricted-Role
DescriptionScoped access for Parable integration
  1. Go to Role Settings tab
  2. Enable the permissions your integration needs:
PermissionPurpose
Users (View)Read user profiles
Dashboard (View)Meeting/webinar data
Recording (View)Access recordings
Zoom Phone (View)Call logs (if applicable)
  1. Set the scope for each permission:
    • Click Edit in the Scope column
    • Select Custom Scope
    • Choose the Parable-Accessible-Users group
    • Click Save
You must set the scope individually for each permission you enable.
3

Create a Service Account

  1. Go to User ManagementUsers
  2. Click Add Users
  3. Create a dedicated service user:
FieldValue
Emailparable-service@yourcompany.com
User TypeLicensed (required for phone data)
  1. Find the new user in the list
  2. Click Edit next to their name
  3. Set User Role to Parable-Restricted-Role
  4. Click Save
The service user must have appropriate licenses to access the data types you need (e.g., Zoom Phone license for call logs).
4

Create the Server-to-Server OAuth App

You must log in as the service user to create the app. Log out of your admin account first.
  1. Log in to Zoom App Marketplace as parable-service@yourcompany.com
  2. Click DevelopBuild App
  3. Select Server-to-Server OAuthCreate
  4. Name the app: Parable Restricted Integration
  5. Go to Scopes and add scopes matching your role permissions:
ScopeMaps to Role Permission
user:read:user, user:read:list_users:adminUsers (View)
meeting:read:meeting, meeting:read:list_meetings:adminDashboard (View)
report:read:admin, report:read:user:adminDashboard (View)
team:read:team, team:read:list_teams:adminTeams (View)
phone:read:admin, phone_call_log:read:adminZoom Phone (View)
  1. Complete required fields and Activate the app
  2. Copy your credentials from App Credentials:
    • Account ID
    • Client ID
    • Client Secret