You do not have permission to perform this action. /api/appointments/

[Iryna Lokhvytska]

Hi team, I see new errors for  /api/appointments/ (create, delete). 

Response for delete https://app.drchrono.com/api/appointments/331815681: 403 {'detail': 'You do not have permission to perform this action.'}.

I checked required scopes and I see that we pass them.

While one that allows patients to schedule appointments online would need at least "patients:summary:read patients:summary:write calendar:read calendar:write clinical:read clinical:write".

Could, someone, please, help me to resolve it?

[aaron....@drchrono.com]

Hello!

While "scopes" grants access for users to programmatically interact with various datapoints within your DrChrono account, you must configure user-based "permissions" to allow access to your "scope" options. The most common fix for your specific issue is to visit "Account" > "Staff Permissions" then locate your API-connected user and click "View" to access the permissions modal. In the modal, locate the permission "Access Scheduling" and ensure the checkbox is "checked" then save your changes.

Let me know if that works for you.

---

Aaron Bethea | DrChrono ETL Migrations / API Specialist

EverHealth

www.everhealth.com