service app token issue

[cedric1989]

Hello,
I did some tests on the API on /v1/meetingParticipants endpoint :
with my personal access token I had access to the meeting participants, no issues.
I then created a service_app, used the generated token with "meeting:participants_read", "meeting:admin_participants_read" but whenever I want to get the participants for a given meetingId of my organization i get a 403 response.
Do I need "spark-compliance:meetings_read" ?
When I tried I could not accept the service_app with "spark-compliance:meetings_read" checked for my organization in the admin panel, do I need to be compliance officer in my org to be able to accept ? 
If so, how can I become one ? because the box is grey whenever I want to change the role for my user, I'm alone in my organization as admin.
Thanks,

[Janos Benyovszki]

@cedric1989 to clarify it firstly: have you entered the hostEmail when you tried to query the /v1/meetingParticipants endpoint ? 

And to confirm, if you want to assign Compliance Officer scopes to a Service App, you will need a CO in Control Hub to approve the app.

About roles, please see here https://help.webex.com/en-us/article/fs78p5/Assign-organization-account-roles-in-Control-Hub#CMGT_TK_T904D062_00 . Normally admins need another admin to get roles, so you might create a second admin in your org and use that to assign roles. As the doc mentions we also recommend having multiple admins in an org.