Trying to ingest logs from zoom | Community
Skip to main content
Newcomer
July 16, 2026
Question

Trying to ingest logs from zoom

  • July 16, 2026
  • 2 replies
  • 66 views

We recently created a server-to-server OAuth application for log ingestion into SIEM. This is set as an account-level app. Under scopes, there are 3 that are enabled:

  • report:read:meeting_activity_log:admin
  • report:read:operation_logs:admin
  • report:read:user_activities:admin



For user level role permissions, the user who created the account has a custom Developer role, with various “View” permissions. While operation and user_activities logs show up correctly, meeting_activity logs come back with

“GET https://api.zoom.us/v2/report/activities: {"code":200,"message":"No permission.”}”

In user roles, we confirmed that under Reports, Usage Reports and User activity reports are enabled for view, along with Dashboard > Dashboard Home Page, Meetings, Zoom Rooms, Webinars, and Team Chat for view.

As these permissions were added, the application was deactivated, rotated the secret, re-enabled, and tried the API again which is still receiving the same error. Zoom support confirmed that correct scopes are assigned

2 replies

bstrelko
Community Champion | Customer
Community Champion | Customer
August 1, 2026

Not able to repro at the moment, but I can attest to the fact that the API reference is frequently mis-aligned with real-world behavior of the API. Unfortunately, the burden is frequently on us (the users / product owners) to identify and report the gaps, even though this shouldn’t be the case.
You may wish to start by expanding your scope temporarily to see if the issue still persists, then narrowing down.

Really weird that you’re getting a 200 and ‘No permission’, as those should come in as 403 errors.

bstrelko
Community Champion | Customer
Community Champion | Customer
August 1, 2026

OOF, one more thing to check - have you requested assistance from Zoom to specifically get the meeting audit trail log enabled?
 

 

 

You also referenced https://api.zoom.us/v2/report/activities in your pasted response and had said this came from meeting_activity logs.
These are two different endpoints:
https://developers.zoom.us/docs/api/meetings/#tag/reports/get/report/activities
https://developers.zoom.us/docs/api/meetings/#tag/reports/get/report/meeting_activities

Can you confirm you’re getting feedback about the ‘activities’ endpoint when calling the ‘meeting_activities’ endpoint or if this was a typo?