ProcedureRequest insufficient_scope

[Hilary Mulholland]

Hi,

I am trying to request the ProcedureRequests for a patient in the sandbox, but I am getting a 403 response - "insufficient_scope". I have added "patient/ProcedureRequest.read" to the authorization scope (just as I have for other resource types where I have no issues).

Do you have any idea what might be going on? Here is an example x-request-id for a failing request: 51f0467eceaa73b7c42ea3d25178b658.

Thank you!

Best,

Hilary

[Madhur Rajendran (Cerner)]

Hi Hilary,

Thank you for posting the x-request-id. I can see from the logs that your authorization doesn't contain the ProcedureRequest scope. 

You'll have to request the scopes on the code console as well as updating the authorization request to request the patient/ProcedureRequest.read scope. You should be able to follow the steps outlined in our tutorial; specifically the steps for registration: https://engineering.cerner.com/smart-on-fhir-tutorial/#registration and for requesting authorization: https://engineering.cerner.com/smart-on-fhir-tutorial/#request-authorization

Thanks,

Madhur (Cerner)