Get access token for Azure API for FHIR using Azure CLI

In this article, you'll learn how to obtain an access token for the Azure API for FHIR using the Azure CLI. When you provision the Azure API for FHIR, you configure a set of users or service principals that have access to the service. If your user object ID is in the list of allowed object IDs, you can access the service using a token obtained using the Azure CLI.


  • Use the Bash environment in Azure Cloud Shell.

    Launch Cloud Shell in a new window

  • If you prefer, install the Azure CLI to run CLI reference commands.

    • If you're using a local installation, sign in to the Azure CLI by using the az login command. To finish the authentication process, follow the steps displayed in your terminal. For additional sign-in options, see Sign in with the Azure CLI.

    • When you're prompted, install Azure CLI extensions on first use. For more information about extensions, see Use extensions with the Azure CLI.

    • Run az version to find the version and dependent libraries that are installed. To upgrade to the latest version, run az upgrade.

Obtain a token

The Azure API for FHIR uses a resource or Audience with URI equal to the URI of the FHIR server https://<FHIR ACCOUNT NAME> You can obtain a token and store it in a variable (named $token) with the following command:

token=$(az account get-access-token --resource=https://<FHIR ACCOUNT NAME> --query accessToken --output tsv)

Use with Azure API for FHIR

curl -X GET --header "Authorization: Bearer $token" https://<FHIR ACCOUNT NAME>

Next steps

In this article, you've learned how to obtain an access token for the Azure API for FHIR using the Azure CLI. To learn how to access the FHIR API using Postman, proceed to the Postman tutorial.