# Rest API call for fetching teams

**URL:** <https://community.developer.atlassian.com/t/rest-api-call-for-fetching-teams/79521>\
**Category:** Forge UI Kit and Custom UI\
**Tags:** content-security-policy, jira-cloud, rest-api\
**Created:** [April 29, 2024, 5:46am UTC](https://community.developer.atlassian.com/t/rest-api-call-for-fetching-teams/79521 "2024-04-29T05:46:18Z")\
**Posts on this page:** 1\
**Showing post:** 13

<div class="post-metadata">

**Author:** ![ibuchanan](https://sea1.discourse-cdn.com/atlassiandeveloper/user_avatar/community.developer.atlassian.com/ibuchanan/32/35815_2.png) [@ibuchanan](https://community.developer.atlassian.com/u/ibuchanan)\
**Post date:** [June 7, 2024, 6:08am UTC](https://community.developer.atlassian.com/t/rest-api-call-for-fetching-teams/79521/13 "2024-06-07T06:08:48Z")

</div>

> [@GrahamCarrick](#):
>
> If I were to guess this is more an issue related to install scopes. We know that apps cannot access data for a different product to the one they are installed in. My guess would be that the scope “identity:atlassian-external” is being treated in the same way and not allowed.

I can confirm your guesses. The `atlassian-external` scope isn’t “real”. Apps cannot declare it, nor can customers authorize it.

> [@GrahamCarrick](#):
>
> The teams API is a platform service connected to an Org and the search API requires specifying a site context. There may be a security issue to be investigated around apps accessing data for other sites which the user has access to but the App doesn’t have the install scope for.

I can also confirm your understanding of the security contexts. It’s a known constraint and one we are trying to expand. But there are many directions to go: cross-product (same site), cross-site, org-level, etc. We’re still trying to work out the intersection of what’s possible and what’s valuable. I don’t think Teams would be unlocked anytime soon.

> [@GrahamCarrick](#):
>
> I believe that there is a lot of potential for Apps built using teams rather than relying on the Jira/Confluence groups as groups are primarily for access control.

Agreed! And I’m glad to hear you’re thinking that way and that certainly lines up with how we want Teams to be used. But it could take some time for that become real.

---

_[View the full topic](https://community.developer.atlassian.com/t/rest-api-call-for-fetching-teams/79521)._