# On Behalf Of User ID (655179206100) provided is invalid or not in the list of allowed OBO Users

**URL:** <https://developer.community.nhs.uk/t/on-behalf-of-user-id-655179206100-provided-is-invalid-or-not-in-the-list-of-allowed-obo-users/12037>\
**Category:** e-Referral Service FHIR API\
**Created:** [7 May 2026 13:40 UTC](https://developer.community.nhs.uk/t/on-behalf-of-user-id-655179206100-provided-is-invalid-or-not-in-the-list-of-allowed-obo-users/12037 "2026-05-07T13:40:53Z")\
**Posts on this page:** 9\
**Page:** 1

<div class="post-metadata">

**Author:** ![simon.goodinson](https://avatars.discourse-cdn.com/v4/letter/s/43a26b/32.png) [@simon.goodinson](https://developer.community.nhs.uk/u/simon.goodinson)\
**Post date:** [7 May 2026 13:40 UTC](https://developer.community.nhs.uk/t/on-behalf-of-user-id-655179206100-provided-is-invalid-or-not-in-the-list-of-allowed-obo-users/12037/1 "2026-05-07T13:40:53Z")

</div>

I have a service where the associated workgroup includes both SERVICE PROVIDER CLINICIAN ADMIN user (CoderG - 655180499106) and SERVICE PROVIDER CLINICIAN user (655179206100).

Calling the A008:RetrieveWorklist we get a response of “diagnostics”: “On Behalf Of User ID (655179206100) provided is invalid or not in the list of allowed OBO Users”

Oddly if I log in as the CoderG we do not see the clinician in the list of OBO users, which would be the reason

 ![image](https://europe1.discourse-cdn.com/nhsdigitaldeveloper/original/1X/714049937c4818e192b6eb2524db4471c5908dd6.png)

However from what I see it is set up correctly.

Appreciate someone having a look and telling me what we are missing

(If required The time that the message was generated was at: 2026-05-07 10:51:23.777. The x-correlation id is: 62992038-AF85-CA49-968E-1DB9611FCD48

---

<div class="post-metadata">

**Author:** ![tony.marsh1](https://dub1.discourse-cdn.com/nhsdigitaldeveloper/user_avatar/developer.community.nhs.uk/tony.marsh1/32/855_2.png) [@tony.marsh1](https://developer.community.nhs.uk/u/tony.marsh1)\
**Post date:** [8 May 2026 10:28 UTC](https://developer.community.nhs.uk/t/on-behalf-of-user-id-655179206100-provided-is-invalid-or-not-in-the-list-of-allowed-obo-users/12037/2 "2026-05-08T10:28:21Z")

</div>

@simon.goodinson

Thanks for posting on the forum.

- Could you tells us which/if any, endpoints you are calling prior to this call (A008)
- Can you confirm the user you are logging in as and the roles they have
- Could you send a screenshot of the workgroup (with members shown)

Thanks! 🙂

Tony

---

<div class="post-metadata">

**Author:** ![simon.goodinson](https://avatars.discourse-cdn.com/v4/letter/s/43a26b/32.png) [@simon.goodinson](https://developer.community.nhs.uk/u/simon.goodinson)\
**Post date:** [8 May 2026 15:16 UTC](https://developer.community.nhs.uk/t/on-behalf-of-user-id-655179206100-provided-is-invalid-or-not-in-the-list-of-allowed-obo-users/12037/3 "2026-05-08T15:16:28Z")

</div>

Thanks Tony, hopefully the following helps

- **Q. Could you tells us which/if any, endpoints you are calling prior to this call (A008)**

Just A0008:Retrieve Worklist

- **Q. Can you confirm the user you are logging in as and the roles they have**

The logged in user is SERVICE PROVIDER CLINICIAN ADMIN user (CoderG - 655180499106).

So CoderG is set up with the role of Med Sec Advanced. Please see below for details:

 ![image](https://europe1.discourse-cdn.com/nhsdigitaldeveloper/original/1X/80a467c9821b2c2336be8c14293bd7921cc62eeb.gif)

Here are the details of the B Codes related to the Clinical Practitioner role:

 ![image](https://europe1.discourse-cdn.com/nhsdigitaldeveloper/original/1X/134ff4e92aebe99f43d279ac723e0e9a0fac55f3.gif)

- **Q. Could you send a screenshot of the workgroup (with members shown)**

 ![image](https://europe1.discourse-cdn.com/nhsdigitaldeveloper/original/1X/d231d0f8b0c158b153f720e8d9b50d758884aba6.gif)

 ![image](https://europe1.discourse-cdn.com/nhsdigitaldeveloper/original/1X/20c34785382a6142ec7bba2c1b65af11d3fd9797.gif)

 ![image](https://europe1.discourse-cdn.com/nhsdigitaldeveloper/original/1X/8ce0cac15c26830ca20e20d96b0e124671fee8a8.gif)

---

<div class="post-metadata">

**Author:** ![George\_Craft](https://avatars.discourse-cdn.com/v4/letter/g/8e7dd6/32.png) [@George\_Craft](https://developer.community.nhs.uk/u/George_Craft)\
**Post date:** [11 May 2026 15:43 UTC](https://developer.community.nhs.uk/t/on-behalf-of-user-id-655179206100-provided-is-invalid-or-not-in-the-list-of-allowed-obo-users/12037/4 "2026-05-11T15:43:05Z")

</div>

> [@simon.goodinson](#):
>
> invalid

Thanks for the information Simon, we are currently looking into this

---

<div class="post-metadata">

**Author:** ![simon.goodinson](https://avatars.discourse-cdn.com/v4/letter/s/43a26b/32.png) [@simon.goodinson](https://developer.community.nhs.uk/u/simon.goodinson)\
**Post date:** [13 May 2026 09:55 UTC](https://developer.community.nhs.uk/t/on-behalf-of-user-id-655179206100-provided-is-invalid-or-not-in-the-list-of-allowed-obo-users/12037/5 "2026-05-13T09:55:36Z")

</div>

Thanks George. Any update from you or @tony.marsh1 ?

---

<div class="post-metadata">

**Author:** ![tony.marsh1](https://dub1.discourse-cdn.com/nhsdigitaldeveloper/user_avatar/developer.community.nhs.uk/tony.marsh1/32/855_2.png) [@tony.marsh1](https://developer.community.nhs.uk/u/tony.marsh1)\
**Post date:** [13 May 2026 10:57 UTC](https://developer.community.nhs.uk/t/on-behalf-of-user-id-655179206100-provided-is-invalid-or-not-in-the-list-of-allowed-obo-users/12037/6 "2026-05-13T10:57:58Z")

</div>

Hi Simon,

We’ve had a look at we still can’t see what the issue is - it looks fine from what you’ve provided so far. We’re thinking a call and you to screen share, might be a better option.

Do you have much availability tomorrow?

---

<div class="post-metadata">

**Author:** ![simon.goodinson](https://avatars.discourse-cdn.com/v4/letter/s/43a26b/32.png) [@simon.goodinson](https://developer.community.nhs.uk/u/simon.goodinson)\
**Post date:** [13 May 2026 13:46 UTC](https://developer.community.nhs.uk/t/on-behalf-of-user-id-655179206100-provided-is-invalid-or-not-in-the-list-of-allowed-obo-users/12037/7 "2026-05-13T13:46:05Z")

</div>

Happy to get on a meeting tomorrow 14:00 if that works. Pleas send a teams as required

---

<div class="post-metadata">

**Author:** ![tony.marsh1](https://dub1.discourse-cdn.com/nhsdigitaldeveloper/user_avatar/developer.community.nhs.uk/tony.marsh1/32/855_2.png) [@tony.marsh1](https://developer.community.nhs.uk/u/tony.marsh1)\
**Post date:** [14 May 2026 11:20 UTC](https://developer.community.nhs.uk/t/on-behalf-of-user-id-655179206100-provided-is-invalid-or-not-in-the-list-of-allowed-obo-users/12037/8 "2026-05-14T11:20:31Z")

</div>

Popped a meeting in the diary at 2pm

---

<div class="post-metadata">

**Author:** ![tony.marsh1](https://dub1.discourse-cdn.com/nhsdigitaldeveloper/user_avatar/developer.community.nhs.uk/tony.marsh1/32/855_2.png) [@tony.marsh1](https://developer.community.nhs.uk/u/tony.marsh1)\
**Post date:** [14 May 2026 14:02 UTC](https://developer.community.nhs.uk/t/on-behalf-of-user-id-655179206100-provided-is-invalid-or-not-in-the-list-of-allowed-obo-users/12037/9 "2026-05-14T14:02:57Z")

</div>

Resolve on call. Issue - unclear. worked on re-try. Marking as resolved, but will share anything on here if we notice any DEP environment changes around the time of the initial post.
