403 Forbidden with Postman for FHIR service in Health Data Services

Question

Hi there,

I'm receiving 403 Forbidden error on postman despite following all the steps in https://learn.microsoft.com/en-us/azure/healthcare-apis/azure-api-for-fhir/tutorial-web-app-fhir-server and getting 403 Forbidden error when trying to call the service using Postman. I can successfully fetch the token for AAD as well as get metadata for my FHIR service but when I try to make any API calls on Patient, I get 403 forbidden. I have also assigned the RBAC role to my fhir service with "FHIR DATA CONTRIBUTOR" to my user but it doesn't work.

Screenshot from 2024-04-01 12-40-56-mh (1)

error:

{
    "resourceType": "OperationOutcome",
    "id": "80823ab78fdca4ed6ac74d80ebb98f95",
    "meta": {
        "lastUpdated": "2024-04-01T07:06:50.7520201+00:00"
    },
    "issue": [
        {
            "severity": "error",
            "code": "forbidden",
            "diagnostics": "Authorization failed."
        }
    ]
}

Answer

@Muralidharan R Thanks for reaching out. Could you please let me know which process you are using to get an access token? also please decode the access token using a tool like https://jwt.ms the audience should match what is in the "authentication" tab. Usually this is the URL of the FHIR Service

Please verify and let me know if issue persists.

403 Forbidden with Postman for FHIR service in Health Data Services

1 answer