# Why are customers created through the API not listed in the console.particle.io

**URL:** <https://community.particle.io/t/why-are-customers-created-through-the-api-not-listed-in-the-console-particle-io/30168>\
**Category:** Cloud\
**Created:** [March 3, 2017, 7:19pm UTC](https://community.particle.io/t/why-are-customers-created-through-the-api-not-listed-in-the-console-particle-io/30168 "2017-03-03T19:19:42Z")\
**Posts on this page:** 3\
**Page:** 2

<div class="post-metadata">

**Author:** ![paulm](https://sea2.discourse-cdn.com/flex026/user_avatar/community.particle.io/paulm/32/15528_2.png) [@paulm](https://community.particle.io/u/paulm)\
**Post date:** [July 19, 2018, 1:33pm UTC](https://community.particle.io/t/why-are-customers-created-through-the-api-not-listed-in-the-console-particle-io/30168/21 "2018-07-19T13:33:29Z")

</div>

> [@rickkas7](#):
>
> Make sure the oAuth client ID and client secret you’re passing in the authorization header are for a full permissions scope. You cannot use a create customer access oAuth client to create a two-legged shadow customer.

😱😱😱😱😱😱😱😱😱  
Well that's probably exactly my issue as you can see in my 5th step the oAuth credentials I'm using were the "create\_customer" type.  
Changing to full permissions scope got a user token returned to me which is what I've been needing...

Can I give you a big "THANK YOU!" for that nugget of wisdom. VERY useful!

As a side note, what is the "create\_customer" scope for, if it is not, in fact, for creating customers?

---

<div class="post-metadata">

**Author:** ![rickkas7](https://sea2.discourse-cdn.com/flex026/user_avatar/community.particle.io/rickkas7/32/8681_2.png) [@rickkas7](https://community.particle.io/u/rickkas7)\
**Post date:** [July 19, 2018, 1:42pm UTC](https://community.particle.io/t/why-are-customers-created-through-the-api-not-listed-in-the-console-particle-io/30168/22 "2018-07-19T13:42:51Z")

</div>

Whew, that’s a relief! Glad it’s finally working.

The create customers oAuth token is used when you’re creating customer claim codes for simple auth from browser-based Javascript code. Since it’s difficult to protect the secret when doing this, this grant type has limited privileges.

---

<div class="post-metadata">

**Author:** ![paulm](https://sea2.discourse-cdn.com/flex026/user_avatar/community.particle.io/paulm/32/15528_2.png) [@paulm](https://community.particle.io/u/paulm)\
**Post date:** [July 19, 2018, 1:44pm UTC](https://community.particle.io/t/why-are-customers-created-through-the-api-not-listed-in-the-console-particle-io/30168/23 "2018-07-19T13:44:24Z")

</div>

Ahhh… ok. Thanks for that info.

And once again, thanks for your help!

[Previous page](https://community.particle.io/t/why-are-customers-created-through-the-api-not-listed-in-the-console-particle-io/30168.md?page=1)