# Authorized access to Google/Facebook APIs

**URL:** <https://community.auth0.com/t/authorized-access-to-google-facebook-apis/77812>\
**Category:** Get Help\
**Tags:** google, facebook\
**Created:** [February 7, 2022, 4:48pm UTC](https://community.auth0.com/t/authorized-access-to-google-facebook-apis/77812 "2022-02-07T16:48:08Z")\
**Posts on this page:** 6\
**Page:** 1

<div class="post-metadata">

**Author:** ![kjk](https://sea1.discourse-cdn.com/auth0/user_avatar/community.auth0.com/kjk/32/35022_2.png) [@kjk](https://community.auth0.com/u/kjk)\
**Post date:** [February 7, 2022, 4:48pm UTC](https://community.auth0.com/t/authorized-access-to-google-facebook-apis/77812/1 "2022-02-07T16:48:08Z")

</div>

Hello,

Can the Google/FB authentication flow be used to not only identify the user but also to access Google/FB APIs respectively using Oauth2 grants? In particular I am interested in the user giving permission by logging in to their Google Ads and Facebook for Business APIs for analytics purposes.

I am new to Auth0 and while I have searched the docs and the forum I am unsure if the above scenario is supposed to be covered.

thank you

---

<div class="post-metadata">

**Author:** ![dan.woda](https://sea1.discourse-cdn.com/auth0/user_avatar/community.auth0.com/dan.woda/32/18340_2.png) [@dan.woda](https://community.auth0.com/u/dan.woda)\
**Post date:** [February 8, 2022, 3:57pm UTC](https://community.auth0.com/t/authorized-access-to-google-facebook-apis/77812/3 "2022-02-08T15:57:51Z")

</div>

Hi @kjk,

Welcome to the Auth0 Community!

You can retrieve a user’s [Identity Provider Access Tokens](https://auth0.com/docs/secure/tokens/access-tokens/identity-provider-access-tokens) via the management API. These are the tokens issued directly from the IdP (e.g. Facebook).

It looks like the Facebook connection allows you to pass a `Business Management` scope that gives access to the “Business Manager API”. Is that the correct resource?

Google has an `AdSense Management` scope. Is that the correct resource?

---

<div class="post-metadata">

**Author:** ![kjk](https://sea1.discourse-cdn.com/auth0/user_avatar/community.auth0.com/kjk/32/35022_2.png) [@kjk](https://community.auth0.com/u/kjk)\
**Post date:** [February 9, 2022, 8:09am UTC](https://community.auth0.com/t/authorized-access-to-google-facebook-apis/77812/4 "2022-02-09T08:09:16Z")

</div>

Thank you Dan,  
scopes seem to cover what I wanted!

---

<div class="post-metadata">

**Author:** ![dan.woda](https://sea1.discourse-cdn.com/auth0/user_avatar/community.auth0.com/dan.woda/32/18340_2.png) [@dan.woda](https://community.auth0.com/u/dan.woda)\
**Post date:** [February 9, 2022, 3:12pm UTC](https://community.auth0.com/t/authorized-access-to-google-facebook-apis/77812/5 "2022-02-09T15:12:35Z")

</div>

Great! Let us know how it goes!

---

<div class="post-metadata">

**Author:** ![Castillo69](https://sea1.discourse-cdn.com/auth0/user_avatar/community.auth0.com/castillo69/32/13269_2.png) [@Castillo69](https://community.auth0.com/u/Castillo69)\
**Post date:** [February 11, 2022, 9:30am UTC](https://community.auth0.com/t/authorized-access-to-google-facebook-apis/77812/6 "2022-02-11T09:30:24Z")

</div>

It looks like the Facebook connection allows you t o pass a business management scope that gives access to the Business Meager API[.](https://www.myccpay.biz/)

---

<div class="post-metadata">

**Author:** ![system](https://global.discourse-cdn.com/auth0/original/3X/b/5/b560f266932fcce5d57f09a6595bd50518cae3f3.jpeg) [@system](https://community.auth0.com/u/system)\
**Post date:** [February 26, 2022, 9:31am UTC](https://community.auth0.com/t/authorized-access-to-google-facebook-apis/77812/7 "2022-02-26T09:31:00Z")

</div>

This topic was automatically closed 15 days after the last reply. New replies are no longer allowed.