Problems in accessing Azure API for FHIR with Postman

Question

question

Shriram-7698 asked Nov 2, '20 swethabadam-7624 commented Mar 2, '22

Problems in accessing Azure API for FHIR with Postman

I followed the steps as per the document in "https://docs.microsoft.com/en-us/azure/healthcare-apis/access-fhir-postman-tutorial" to set up the FHIR API and registered a client application with "FHIR Data Contributor" access level. And I am able to get the metadata in Postman. But when i try to access the Patient resource, instead of the response code 200-OK it is still giving 403_Forbidden error after using the right token. Did anyone faced the similar issue while setting it up?

azure-api-fhir

5 |1600 characters needed characters left characters exceeded

Attachments: Up to 10 attachments (including images) can be used with a maximum of 3.0 MiB each and 30.0 MiB total.

Answer 1 · 2020-11-03T06:05:32.793Z

AnuragSharma-MSFT answered Nov 3, '20

Hi @Shriram-7698, welcome to Microsoft Q&A forum.

This issue is mostly related to adding the configuring RBAC roles for the Azure FHIR service. While adding the role assignment, please select the user too as mentioned in the below screenshot and then try doing a Get Request.

Also assuming that you have created the access token already as mentioned in the article.

Please let me know if this helps or else we can discuss further.

if answer helps, please select 'Accept Answer' as this could help other community members looking for similar queries.

image.png (38.6 KiB)

5 |1600 characters needed characters left characters exceeded

Attachments: Up to 10 attachments (including images) can be used with a maximum of 3.0 MiB each and 30.0 MiB total.

Answer 2 · 2020-11-03T15:45:07.233Z

Shriram-7698 answered Nov 3, '20 AnuragSharma-MSFT commented Nov 4, '20

Thanks @AnuragSharma-MSFT. That solution worked for me. But if i give the user, "FHIR Data Contributor" access, then the applications created by the user should automatically inherit the same access level right? Or Should we have to explicitly assign the role to the client application that the user creates next?

· 1

5 |1600 characters needed characters left characters exceeded

Attachments: Up to 10 attachments (including images) can be used with a maximum of 3.0 MiB each and 30.0 MiB total.

AnuragSharma-MSFT · Nov 04, 2020 at 09:57 AM

Hi @Shriram-7698, glad it worked out for you.

Also if possible, could you please provide more information on which applications are you talking about?

0 ·

Answer 3 · 2020-11-19T02:52:40.63Z

Shriram-7698 answered Nov 19, '20

screen-shot-2020-11-18-at-84348-pm.png (153.1 KiB)

5 |1600 characters needed characters left characters exceeded

Attachments: Up to 10 attachments (including images) can be used with a maximum of 3.0 MiB each and 30.0 MiB total.

Answer 4 · 2020-11-19T02:55:42.02Z

Shriram-7698 answered Nov 19, '20 AnuragSharma-MSFT commented Nov 24, '20

@AnuragSharma-MSFT Will the Apps inherit the same access level as the user who generated them as above?

· 2

5 |1600 characters needed characters left characters exceeded

Attachments: Up to 10 attachments (including images) can be used with a maximum of 3.0 MiB each and 30.0 MiB total.

AnuragSharma-MSFT · Nov 23, 2020 at 11:14 AM

Hi @Shriram-7698, I am looking into it and get back to you at the earliest.

1 ·

AnuragSharma-MSFT · Nov 24, 2020 at 07:22 AM

Hi @Shriram-7698, if we have registered the app in Azure active Directory and provided the permission of user_impersonation as mentioned in below screenshot, we don't need to assign the roles to Apps. They should inherit from the same signed-in user. But yes that user should be added to the specific roles:

1 ·

image.png (75.5 KiB)

Answer 5 · 2020-11-22T00:49:46.207Z

NandanShanbhag-1580 answered Nov 22, '20 AnuragSharma-MSFT commented Nov 24, '20

Hello @AnuragSharma-MSFT ,

I have been trying to get the same issue working for me, but unable to get authentication for the https://XXXX.azurehealthcareapis.com/Patient call working for me in Postman. I had to stop the tutorial after attempting this for multiple days as I got charged for running the FHIR service

image.png (72 B)

· 1

5 |1600 characters needed characters left characters exceeded

Attachments: Up to 10 attachments (including images) can be used with a maximum of 3.0 MiB each and 30.0 MiB total.

AnuragSharma-MSFT · Nov 24, 2020 at 07:23 AM

Hi @NandanShanbhag-1580, could you please elaborate the exact step where you were facing the issue? Also are you following the same document as mentioned in the question at the top?

0 ·

Answer 6 · 2020-11-24T14:29:23.59Z

NandanShanbhag-1580 answered Nov 24, '20 swethabadam-7624 commented Mar 2, '22

Thanks @AnuragSharma-MSFT for getting back to me. I did use the same exact tutorial and double checked to make sure I gave FHIR Data Contributor role to the client app as well as my MSFT account.
I also ensured that the token was created as per the tutorial.

The 401 I got was during testing the get patient API call from postman. I have deleted the resource as I was getting charged for running it, so I cannot provide the actual error now.

image.png (61.2 KiB)

· 2

5 |1600 characters needed characters left characters exceeded

Attachments: Up to 10 attachments (including images) can be used with a maximum of 3.0 MiB each and 30.0 MiB total.

VinodRanaveni-3798 · Jan 28, 2021 at 04:35 PM

Thanks @AnuragSharma-MSFT, I am also facing same issue from long time.
Through Web App i am able to authenticate via Azure AD But i am getting below error. (Followed as per documentation)
Please help if you know any blog to test Azure FHIR API with Postman.
{
"resourceType": "OperationOutcome",
"id": "96c012d38bf0c44e891d8b117faa73fc",
"issue": [
{
"severity": "error",
"code": "login",
"diagnostics": "Authentication failed."
}
]
}

0 ·

swethabadam-7624 VinodRanaveni-3798 · Mar 02 at 06:14 PM

Im facing the same issue. Did anyone figure out the solution. IF yes, please help me.

0 ·

question