diff --git a/routers/router.go b/routers/router.go
index 7c5a84cd..8c24708c 100644
--- a/routers/router.go
+++ b/routers/router.go
@@ -1007,6 +1007,7 @@ func initMasterRouter(dep dependency.Dep) *gin.Engine {
 					{
 						// 获取 OneDrive OAuth URL
 						oauth.POST("signin",
+							middleware.RequiredScopes(types.ScopeAdminWrite),
 							controllers.FromJSON[adminsvc.GetOauthRedirectService](adminsvc.GetOauthRedirectParamCtx{}),
 							controllers.AdminOdOAuthURL,
 						)