What is minimal OAuth scope to know user's ZUID and ZOID?

What is minimal OAuth scope to know user's ZUID and ZOID?

Hi! I need to link Zoho's user's account and organization with user and organization in my App.
I know scope "aaaserver.profile.READ" shows ZUID at "/oauth/user/info" endpoint.
And "openid" scope shows string 123.456 in "sub" key of "identy_token" JWT payload of "request access token" response, where 123 is ZUID and 456 is not ZOID (not documented).

Also, what is minimal scope to know if user is of an admin role? To grant him/her permission to link organizations between Zoho and my app.

Currently, I had to request "ZohoCRM.org.READ" (for organization id ZOID), "ZohoCRM.settings.roles.READ" (to know whether user is of an admin role) and "ZohoCRM.users.READ" (to get role), which seems like too much permissions for just login to my app.

Thank you!
    • Sticky Posts

    • Kaizen #198: Using Client Script for Custom Validation in Blueprint

      Nearing 200th Kaizen Post – 1 More to the Big Two-Oh-Oh! Do you have any questions, suggestions, or topics you would like us to cover in future posts? Your insights and suggestions help us shape future content and make this series better for everyone.
    • Kaizen #226: Using ZRC in Client Script

      Hello everyone! Welcome to another week of Kaizen. In today's post, lets see what is ZRC (Zoho Request Client) and how we can use ZRC methods in Client Script to get inputs from a Salesperson and update the Lead status with a single button click. In this
    • Kaizen #222 - Client Script Support for Notes Related List

      Hello everyone! Welcome to another week of Kaizen. The final Kaizen post of the year 2025 is here! With the new Client Script support for the Notes Related List, you can validate, enrich, and manage notes across modules. In this post, we’ll explore how
    • Kaizen #217 - Actions APIs : Tasks

      Welcome to another week of Kaizen! In last week's post we discussed Email Notifications APIs which act as the link between your Workflow automations and you. We have discussed how Zylker Cloud Services uses Email Notifications API in their custom dashboard.
    • Kaizen #216 - Actions APIs : Email Notifications

      Welcome to another week of Kaizen! For the last three weeks, we have been discussing Zylker's workflows. We successfully updated a dormant workflow, built a new one from the ground up and more. But our work is not finished—these automated processes are