# A010 - 403 Error (Int environment)

**URL:** <https://developer.community.nhs.uk/t/a010-403-error-int-environment/1204>\
**Category:** e-Referral Service (e-RS)\
**Tags:** fhir\
**Created:** [23 July 2024 16:02 UTC](https://developer.community.nhs.uk/t/a010-403-error-int-environment/1204 "2024-07-23T16:02:51Z")\
**Posts on this page:** 3\
**Page:** 1

<div class="post-metadata">

**Author:** ![richard.neal](https://avatars.discourse-cdn.com/v4/letter/r/4da419/32.png) [@richard.neal](https://developer.community.nhs.uk/u/richard.neal)\
**Post date:** [23 July 2024 16:02 UTC](https://developer.community.nhs.uk/t/a010-403-error-int-environment/1204/1 "2024-07-23T16:02:51Z")

</div>

Hi.

I Wonder if anyone can help with this. I’m getting a 403 (forbidden) error hitting the A010 endpoint in INT.

The x-correlation-id is 73c8ff10-9668-4ebc-a195-b17b24d7ee03.

POST [https://int.api.service.nhs.uk/referrals/FHIR/STU3/HealthcareService/$ers.searchHealthcareServicesForPatient](https://int.api.service.nhs.uk/referrals/FHIR/STU3/HealthcareService/$ers.searchHealthcareServicesForPatient)  
accept: application/fhir+json  
authorization: Bearer {{token}}  
content-type: application/fhir+json  
nhsd-end-user-organisation-ods: B85368  
nhsd-ers-business-function: REFERRING\_CLINICIAN  
x-correlation-id: 73c8ff10-9668-4ebc-a195-b17b24d7ee03

However, I am able to get a response from the A030 endpoint, but I think that suggests what I’m missing are the required business functions against my user.

{  
“id”: “0ed70db2-b55f-43be-b1fb-07b0c90fa8f3”,  
“resourceType”: “Bundle”,  
“meta”: {  
“lastUpdated”: “2024-07-23T15:58:05.571Z”,  
“profile”: [  
“[https://fhir.hl7.org.uk/StructureDefinition/UKCore-Bundle](https://fhir.hl7.org.uk/StructureDefinition/UKCore-Bundle)”  
]  
},  
“type”: “searchset”,  
“total”: 0,  
“timestamp”: “2024-07-23T15:58:05.571Z”,  
“link”: [  
{  
“relation”: “self”,  
“url”: “[https://int.api.service.nhs.uk/referrals/FHIR/R4/PractitionerRole](https://int.api.service.nhs.uk/referrals/FHIR/R4/PractitionerRole)”  
}  
]  
}

Does that sound correct? and if so how do I get them setup? We’ve tried adding the roles to my user (Nb. I’m accessing the system with a Security Key rather than a Smartcard).

---

<div class="post-metadata">

**Author:** ![richard.neal](https://avatars.discourse-cdn.com/v4/letter/r/4da419/32.png) [@richard.neal](https://developer.community.nhs.uk/u/richard.neal)\
**Post date:** [23 July 2024 16:33 UTC](https://developer.community.nhs.uk/t/a010-403-error-int-environment/1204/2 "2024-07-23T16:33:38Z")

</div>

Update: the roles including REFERRING\_CLINICIAN are now coming through on the A030 request. However, I’m still getting the 403 against the A010 request.

---

<div class="post-metadata">

**Author:** ![richard.neal](https://avatars.discourse-cdn.com/v4/letter/r/4da419/32.png) [@richard.neal](https://developer.community.nhs.uk/u/richard.neal)\
**Post date:** [24 July 2024 08:13 UTC](https://developer.community.nhs.uk/t/a010-403-error-int-environment/1204/3 "2024-07-24T08:13:26Z")

</div>

It’s now actually working now those roles have been added.