diff --git a/app/controllers/shared/api.php b/app/controllers/shared/api.php
index 0b10452b1e..cf7980b694 100644
--- a/app/controllers/shared/api.php
+++ b/app/controllers/shared/api.php
@@ -292,6 +292,7 @@ App::init()
                 throw new Exception(Exception::USER_UNAUTHORIZED);
             }
 
+            $scopes = []; // reset scope if admin
             foreach ($adminRoles as $role) {
                 $scopes = \array_merge($scopes, $roles[$role]['scopes']);
             }