# Primary (master) account APIs

<!-- WARNING: THIS FILE WAS AUTOGENERATED! DO NOT EDIT! -->

Primary accounts (formerly referred to as master accounts) are Zoom accounts that manage one or more sub accounts. The terms primary and master may be used interchangeably throughout the documentation.

For example:

-   A university may use a primary account to manage separate sub accounts for each department.
-   An enterprise might use a primary account to manage business units that operate under different regulatory requirements.
-   Zoom [reseller and distributor technology partners](https://partner.zoom.com/) can also be primary account holders.

Primary accounts have access to primary/master account APIs, which allow them to programmatically manage activities related to their sub accounts.

> **Primary account API access limitations**
>
> Primary account APIs can only be used to manage their **own** sub accounts. They **cannot** be used to access or manage other primary accounts.

## Tiered account structures

Zoom partners, such as resellers and distributors, can use primary accounts to provision **two-tiered** or **three-tiered** account structures:

-   **Two-tiered** - A single primary account manages multiple sub accounts directly.
-   **Three-tiered** - A top-level primary account manages one or more **second-level** primary accounts. Each second-level account can, in turn, provision and manage its own sub accounts.

![](/img/1636145489712.png)

_**For enrollment or business queries regarding reseller and distributor technology partner programs, email [**partner-success@zoom.us**](mailto:partner-success@zoom.us).**_

## Using primary/master account APIs

Primary account API endpoints are prepended with `/accounts/{accountId}`. The request and response formats mirror those of standard Zoom APIs.

For example, a regular Zoom account uses the [GET /users](/docs/api/users/#tag/users/GET/users) endpoint to list all of its users. In contrast, a primary account lists users in a sub account using the [List users (`GET /accounts/{accountId}/users`)](/docs/api/users/ma/#tag/users/get/accounts/{accountId}/users) endpoint.

To call primary account API endpoints, the primary account must authenticate using one of the following:

-   An [OAuth token](/docs/integrations/oauth/) associated with a user under the primary account
-   A [Server-to-Server OAuth token](/docs/internal-apps/s2s-oauth/)

The primary account must have the **Manage the sub account** role enabled to access and manage sub account data via API. See [Using role management](https://support.zoom.com/hc/en/article?id=zm_kb&sysparm_article=KB0064983) and [Managing Zoom sub accounts](https://support.zoom.com/hc/en/article?id=zm_kb&sysparm_article=KB0066764) for details.

To get a sub account's `accountId`, use the [Get account settings](/docs/api/accounts/#tag/accounts/get/accounts/{accountId}/settings) API and pass `me` as the `accountId` value.

### Related References

-   Zoom primary account APIs - In the sidebar, under **Master accounts**, click **References**, and choose a product to explore supported endpoints.
-   [Phone primary account API](/docs/api/phone/ma)
-   [Video SDK primary account API](/docs/api/video-sdk/ma)
-   [Video SDK Account Plans](/docs/api/references/manage-plans//#video-sdk-account-plans)