Workflow or API calls:
The scope registered in the App is the same Application scope
We are able to get the JSON response through the Document reference API
however, if we tried to access the attachment through the Binary Resource - DocumentReference.content.attachment.url
content": [
{
"attachment": {
"contentType": "application/pdf",
"url": "https://fhir-myrecord.cerner.com/r4/XXXXX /Binary/XR-1783364702",
"title": "Preprocedure Checklist Short Form",
"creation": "2025-06-19T16:43:00.000Z"
"url": "https://fhir-myrecord.cerner.com/r4/XXXXXX/Binary/XR-1783542608",
We get a 403 error when we access the URL for the document
Please let us know if we are are using the right approach to get the document or if it is scope issue how do we resolve this ?
Background Information:
Failure to provide answers will impact our ability to respond in a timely and effective manner
Developer questions:
Are you an OPN Member? No
Have you signed up to be in the Healthcare Developer Track? No
Are you a registered Code Program member? Yes
Does your App have a presence on the Oracle Healthcare App Marketplace? No
Are you developing on behalf of an Oracle Health client?
If so, which client:
Application's Client ID and App ID, if relevant:
Expected Result:
Expected to get the content of the document
Actual Result:
X-Request-Id / Cerner-Correlation-Id / opc-request-id:
Date/time of the example:
We get a 403 error when we access the URL for the document
Date: Fri, 29 Aug 2025 15:07:29 GMT
opc-request-id: /8E3E782E84A5E931BE04F57ACF0F9932/681E367A73D3EDF7557D512BC71E2101
Response Body:
{"code":403,"message":"code=\"urn:cerner:error:oauth2:resource-access:insufficient-scopes\", error=\"insufficient_scope\", subcode=\"no_scope_for_resource_path\""}