# Error 403 'A030 - Retrieve e-RS business functions' failed

**URL:** <https://developer.community.nhs.uk/t/error-403-a030-retrieve-e-rs-business-functions-failed/5723>\
**Category:** e-Referral Service FHIR API\
**Tags:** authentication, fhir\
**Created:** [8 May 2025 15:01 UTC](https://developer.community.nhs.uk/t/error-403-a030-retrieve-e-rs-business-functions-failed/5723 "2025-05-08T15:01:28Z")\
**Posts on this page:** 11\
**Page:** 1

<div class="post-metadata">

**Author:** ![Chris\_Pratt](https://avatars.discourse-cdn.com/v4/letter/c/e99b99/32.png) [@Chris\_Pratt](https://developer.community.nhs.uk/u/Chris_Pratt)\
**Post date:** [8 May 2025 15:01 UTC](https://developer.community.nhs.uk/t/error-403-a030-retrieve-e-rs-business-functions-failed/5723/1 "2025-05-08T15:01:28Z")

</div>

Hello,

We’re seeing the following errors when attempting to connect with ersFHIR. This is against ASID 200000002454. We are also experiencing the same against ASID: 200000002456

 ![image](https://europe1.discourse-cdn.com/nhsdigitaldeveloper/original/1X/e22fba9b0483f0746e3d702d52236bf62e74eedb.png)

Please can someone advise on what is causing this?

---

<div class="post-metadata">

**Author:** ![adam.oldfield](https://dub1.discourse-cdn.com/nhsdigitaldeveloper/user_avatar/developer.community.nhs.uk/adam.oldfield/32/327_2.png) [@adam.oldfield](https://developer.community.nhs.uk/u/adam.oldfield)\
**Post date:** [9 May 2025 07:41 UTC](https://developer.community.nhs.uk/t/error-403-a030-retrieve-e-rs-business-functions-failed/5723/2 "2025-05-09T07:41:55Z")

</div>

Hi @Chris_Pratt,

Can you please provide all/some of the following to help us trace your request:

- Application ID
- X-Correlation-ID / X-Request-ID of the affected request/response

Also please provide details of:

- The Request URL, headers and payload
- The Response status, headers and payload

@Daniel_McAdam FYI.

Regards,

Adam.

---

<div class="post-metadata">

**Author:** ![Chris\_Pratt](https://avatars.discourse-cdn.com/v4/letter/c/e99b99/32.png) [@Chris\_Pratt](https://developer.community.nhs.uk/u/Chris_Pratt)\
**Post date:** [12 May 2025 11:10 UTC](https://developer.community.nhs.uk/t/error-403-a030-retrieve-e-rs-business-functions-failed/5723/3 "2025-05-12T11:10:42Z")

</div>

Hi @adam.oldfield @Daniel_McAdam

Thanks for taking a look. I’ve reproduced the error again this morning. Here’s the info requested. Please let me know if there’s anything else you need.

 ![image](https://europe1.discourse-cdn.com/nhsdigitaldeveloper/original/1X/953b72d905b757a8bc324ec741007160473dc7ef.png)

---

<div class="post-metadata">

**Author:** ![Chris\_Pratt](https://avatars.discourse-cdn.com/v4/letter/c/e99b99/32.png) [@Chris\_Pratt](https://developer.community.nhs.uk/u/Chris_Pratt)\
**Post date:** [12 May 2025 11:11 UTC](https://developer.community.nhs.uk/t/error-403-a030-retrieve-e-rs-business-functions-failed/5723/4 "2025-05-12T11:11:14Z")

</div>

Application ID: saas-qa-v9-2-ers  
ASID: 200000002454  
Request X-Correlation-ID: d25d4e66-a134-47e4-8daf-ce378133c908

GET [https://int.api.service.nhs.uk/referrals/FHIR/R4/PractitionerRole](https://int.api.service.nhs.uk/referrals/FHIR/R4/PractitionerRole) Accept: _/_ X-Correlation-Id: d25d4e66-a134-47e4-8daf-ce378133c908 Accept-Encoding: gzip

---

<div class="post-metadata">

**Author:** ![Chris\_Pratt](https://avatars.discourse-cdn.com/v4/letter/c/e99b99/32.png) [@Chris\_Pratt](https://developer.community.nhs.uk/u/Chris_Pratt)\
**Post date:** [12 May 2025 11:11 UTC](https://developer.community.nhs.uk/t/error-403-a030-retrieve-e-rs-business-functions-failed/5723/5 "2025-05-12T11:11:45Z")

</div>

Response message

HTTP/1.1 403 Unauthorized  
Date: Mon, 12 May 2025 10:50:11 GMT  
Content-Type: application/fhir+json  
Content-Length: 411  
Connection: keep-alive  
Strict-Transport-Security: max-age=31536000; includeSubDomains  
X-Correlation-ID: fe09e041-f910-4e54-ae36-ca5437c69ca0

{ “resourceType”: “OperationOutcome”, “meta”: { “lastUpdated”: “2025-05-12T10:50:11.587Z”, “profile” : [“[OperationOutcome - FHIR v4.0.1](https://www.hl7.org/fhir/R4/operationoutcome.html)” ] }, “issue”: [{ “severity”: “error”, “code”: “forbidden”, “details”: { “coding”: [ { “system”: “[https://fhir.nhs.uk/CodeSystem/NHSD-API-ErrorOrWarningCode](https://fhir.nhs.uk/CodeSystem/NHSD-API-ErrorOrWarningCode)”, “code”: “ACCESS\_DENIED” } ] }, “diagnostics”: “ASID is not configured in the application” } ] }

---

<div class="post-metadata">

**Author:** ![adam.oldfield](https://dub1.discourse-cdn.com/nhsdigitaldeveloper/user_avatar/developer.community.nhs.uk/adam.oldfield/32/327_2.png) [@adam.oldfield](https://developer.community.nhs.uk/u/adam.oldfield)\
**Post date:** [13 May 2025 16:06 UTC](https://developer.community.nhs.uk/t/error-403-a030-retrieve-e-rs-business-functions-failed/5723/6 "2025-05-13T16:06:45Z")

</div>

@nhserspartners @lucy.killick1 As discussed, could you assist Chris with this please?

---

<div class="post-metadata">

**Author:** ![adam.oldfield](https://dub1.discourse-cdn.com/nhsdigitaldeveloper/user_avatar/developer.community.nhs.uk/adam.oldfield/32/327_2.png) [@adam.oldfield](https://developer.community.nhs.uk/u/adam.oldfield)\
**Post date:** [14 May 2025 12:38 UTC](https://developer.community.nhs.uk/t/error-403-a030-retrieve-e-rs-business-functions-failed/5723/7 "2025-05-14T12:38:24Z")

</div>

Hi @Chris_Pratt,

> Application ID: saas-qa-v9-2-ers  
> ASID: 200000002454  
> Request X-Correlation-ID: d25d4e66-a134-47e4-8daf-ce378133c908

Tracing `X-Correlation-ID` =`d25d4e66-a134-47e4-8daf-ce378133c908` I can see that the request is related to Application ID `6c628c42-7039-4a8f-92be-3a9012312ebf` .

This application is named `nervecentre-cis2` not `saas-qa-v9-2-ers` (which has Application ID `9405a178-cf4e-4895-9fc8-ea2c85cbc2d6`).

Are you intentionally using a different Application or is this a configuration error?

If you want to use `6c628c42-7039-4a8f-92be-3a9012312ebf` then we will need to configure it with your ASID.

@lucy.killick1

Thanks,

Adam.

---

<div class="post-metadata">

**Author:** ![Chris\_Pratt](https://avatars.discourse-cdn.com/v4/letter/c/e99b99/32.png) [@Chris\_Pratt](https://developer.community.nhs.uk/u/Chris_Pratt)\
**Post date:** [14 May 2025 13:05 UTC](https://developer.community.nhs.uk/t/error-403-a030-retrieve-e-rs-business-functions-failed/5723/8 "2025-05-14T13:05:22Z")

</div>

Thanks for taking a look @adam.oldfield, much appreciated. Looks like there’s been a config error here on NHS-E side. Below is the required config, taken from our original support request on 2 April and allegedly double checked on 8 May.

Please could you update the ASID binding to the correct application IDs, as detailed here, for both ASID 200000002454 and ASID 200000002456.

**1.**

**ASIDs**

200000002454

**Application Name:**  
saas-qa-v9-2-ers

**Application ID:**  
9405a178-cf4e-4895-9fc8-ea2c85cbc2d6

**Endpoint**

[t3.saas-qa-v9-2.saas.nervecentre.thirdparty.nhs.uk](http://t3.saas-qa-v9-2.saas.nervecentre.thirdparty.nhs.uk/)

**2.**

**ASIDs**

200000002456

**Application Name:**  
saas-qa-master-ers

**Application ID:**  
bf1684c9-ae24-4a10-b174-60879855c0b3

**Endpoint**

[t3.saas-qa-master.saas.nervecentre.thirdparty.nhs.uk](http://t3.saas-qa-master.saas.nervecentre.thirdparty.nhs.uk/)

@lucy.killick1

Thanks,

Chris

---

<div class="post-metadata">

**Author:** ![adam.oldfield](https://dub1.discourse-cdn.com/nhsdigitaldeveloper/user_avatar/developer.community.nhs.uk/adam.oldfield/32/327_2.png) [@adam.oldfield](https://developer.community.nhs.uk/u/adam.oldfield)\
**Post date:** [14 May 2025 13:30 UTC](https://developer.community.nhs.uk/t/error-403-a030-retrieve-e-rs-business-functions-failed/5723/9 "2025-05-14T13:30:01Z")

</div>

Hi @Chris_Pratt,

The Applications you have listed have been configured with the ASIDs provided.

However, the request you made with `X-Correlation-ID`=`d25d4e66-a134-47e4-8daf-ce378133c908` (from your message above) was not in the context of either of the Application IDs you listed.

The request that failed was called in the context of Application ID `6c628c42-7039-4a8f-92be-3a9012312ebf` which is named `nervecentre-cis2`.

Can you check the API Key you are providing is associated with the correct Application ID?

Thanks,

Adam.

---

<div class="post-metadata">

**Author:** ![Chris\_Pratt](https://avatars.discourse-cdn.com/v4/letter/c/e99b99/32.png) [@Chris\_Pratt](https://developer.community.nhs.uk/u/Chris_Pratt)\
**Post date:** [14 May 2025 14:19 UTC](https://developer.community.nhs.uk/t/error-403-a030-retrieve-e-rs-business-functions-failed/5723/10 "2025-05-14T14:19:27Z")

</div>

Aha! Thanks @adam.oldfield

We’ve made a change to the way we configure our app names and associated API keys in our system which may have resulted in it sending the wrong API key.

Correcting the config and retesting…

---

<div class="post-metadata">

**Author:** ![Chris\_Pratt](https://avatars.discourse-cdn.com/v4/letter/c/e99b99/32.png) [@Chris\_Pratt](https://developer.community.nhs.uk/u/Chris_Pratt)\
**Post date:** [15 May 2025 10:40 UTC](https://developer.community.nhs.uk/t/error-403-a030-retrieve-e-rs-business-functions-failed/5723/11 "2025-05-15T10:40:44Z")

</div>

@adam.oldfield Just a quick update - I’ve now retested and we’re up and running. Thank you for your help and assistance.
