# A008 using application restriced access

**URL:** <https://developer.community.nhs.uk/t/a008-using-application-restriced-access/2225>\
**Category:** e-Referral Service FHIR API\
**Created:** [16 September 2024 13:47 UTC](https://developer.community.nhs.uk/t/a008-using-application-restriced-access/2225 "2024-09-16T13:47:48Z")\
**Posts on this page:** 4\
**Page:** 1

<div class="post-metadata">

**Author:** ![nasreensaeed](https://avatars.discourse-cdn.com/v4/letter/n/f9ae1b/32.png) [@nasreensaeed](https://developer.community.nhs.uk/u/nasreensaeed)\
**Post date:** [16 September 2024 13:47 UTC](https://developer.community.nhs.uk/t/a008-using-application-restriced-access/2225/1 "2024-09-16T13:47:48Z")

</div>

I’m trying to make the A008 call using application restriction access in your int enviroment and i’m get a 422 back with the error “‘Service’ (21012) does not exist”

I’m using the following in the headers:  
NHSD-End-User-Organisation-ODS: R69  
NHSD-eRS-Business-Function: SERVICE\_PROVIDER\_CLINICIAN  
X-Correlation-ID: 11C46F5F-CDEF-4865-94B2-0EE0EDCC26DA

Can you advise what the service ID should be as I’m posting the body that is available in your documentation?

---

<div class="post-metadata">

**Author:** ![adam.oldfield](https://dub1.discourse-cdn.com/nhsdigitaldeveloper/user_avatar/developer.community.nhs.uk/adam.oldfield/32/327_2.png) [@adam.oldfield](https://developer.community.nhs.uk/u/adam.oldfield)\
**Post date:** [16 September 2024 14:01 UTC](https://developer.community.nhs.uk/t/a008-using-application-restriced-access/2225/2 "2024-09-16T14:01:37Z")

</div>

Hi @nasreensaeed,

For application restricted access you should not be providing the NHSD-End-User-Organisation-ODS and NHSD-eRS-Business-Function headers. Your request should have been rejected if in an application-restricted context - so please confirm this.

Please also ensure the X-Correlation-ID value provided is unique as this would be used to trace your request. The one provided looks to be the same as the example value in the documentation.

If you want to filter by service you will need to find a valid service ID for that environment. I suggest logging into the Professional UI as a Service Definer to find or configure an appropriate service.

Regards,

Adam.

---

<div class="post-metadata">

**Author:** ![nasreensaeed](https://avatars.discourse-cdn.com/v4/letter/n/f9ae1b/32.png) [@nasreensaeed](https://developer.community.nhs.uk/u/nasreensaeed)\
**Post date:** [16 September 2024 14:19 UTC](https://developer.community.nhs.uk/t/a008-using-application-restriced-access/2225/3 "2024-09-16T14:19:18Z")

</div>

Hi Adam,

I don’t want to filter by service however when I post a body without the service ID I get the error ‘A mandatory input field is missing’ followed by ‘Service ID is missing.’ Which indicates we need a service ID

I have removed both NHSD-End-User-Organisation-ODS and NHSD-eRS-Business-Function headers and changed my X-Correlation-ID to 6dabb085-01ee-43b2-8329-075e20c19f30

---

<div class="post-metadata">

**Author:** ![adam.oldfield](https://dub1.discourse-cdn.com/nhsdigitaldeveloper/user_avatar/developer.community.nhs.uk/adam.oldfield/32/327_2.png) [@adam.oldfield](https://developer.community.nhs.uk/u/adam.oldfield)\
**Post date:** [16 September 2024 15:24 UTC](https://developer.community.nhs.uk/t/a008-using-application-restriced-access/2225/4 "2024-09-16T15:24:41Z")

</div>

> [@nasreensaeed](#):
>
> I don’t want to filter by service however when I post a body without the service ID I get the error ‘A mandatory input field is missing’ followed by ‘Service ID is missing.’ Which indicates we need a service ID

The service ID filter is mandatory when using application-restricted access (optional for user-restricted). There are also limitations on the number of times per day you can call the endpoint. See the “Pre-requisites” section of the documentation for more details.