Authenticate as "root"

3 replies
766 views

Hi. I am following https://developers.ringcentral.com/guide/authentication/tokens

Trying to build app that will manipulate address books for all users in the company.

I am able to auth and get a token both in Sandbox and Prod.

But according to the page above, I need to supply

a username
an extension
a password

If I supply the above for my user (I'm admin), I'm able to manage my address book, but when accessing another extension's, I get:

"In order to call this API endpoint for another extension, user needs to have [ReadPersonalContacts] permission granted with extended scope"

Questions:

What's the best approach to have my App auth, without using someone's personal credentials? Create another extension just for the API (that will incur cost)?
How to resolve the above error? what is "extended scope"?

thanks

PhongVu

Community Manager

The error is missed leading. It should be "not allowed" or "no permission". Even you login as a super admin, you still cannot read personal contacts of other extensions. I think we had a plan to support that but there might be some privacy protection regulation which stops us from implementing the feature.

U

Uri3493163020

Author

The First Step

Thanks. so what are my options to create an app that will sync each user's address book with our own data?

T

Transcend3136392020

New Participant

Hi Phong, thanks for your response, this confirms what I was able to do testing your API.

Unfortunately, my company finds that this limitation makes it nearly impossible for org's using RC to comply with privacy regulations since each user of RC in an org will have a separately managed contact list. We need a way for just the privacy/compliance people to "globablly delete" contact information -- but there is no scope we can give that allows them the ability to see other users' contacts.

Please help!

Sign up

Login with SSO

Login to the community

Login with SSO