Skip to main content

Documentation Index

Fetch the complete documentation index at: https://help.elationhealth.com/llms.txt

Use this file to discover all available pages before exploring further.

Beta Feature: Token scopes are currently in closed beta and available to select customers only.

Overview

Token scopes allow you to restrict an access token’s permissions to only the API resources it needs. When requesting a token via the Get Token endpoint, you can specify one or more scopes using the scope parameter. If no scope is specified, the token defaults to the apiv2 global scope, which grants access to all API resources.

Scope Format

Scopes follow the pattern:
system/<resource>.<permission>
  • resource: The API resource name (e.g., patients, allergies, lab_orders).
  • permission: Either read or write.

Permissions

  • read grants access to the resource’s GET endpoints.
  • write grants access to the resource’s POST, PUT, PATCH, and DELETE endpoints.

Nested resources

Nested endpoints are controlled by their parent resource’s scope. For example, system/patients.read and system/patients.write control access to the patient insurance card image endpoint at /api/2.0/patients/{patient_id}/policies/{policy_id}/card-images. Visit note and document signing are governed by a separate opt-in mechanism, but are permissioned under system/visit_notes.write.

Requesting Scopes

Pass a space-separated list of scopes in the scope parameter when requesting a token. Because the body is application/x-www-form-urlencoded, spaces between scopes must be URL-encoded (typically as %20 or +):
POST /api/2.0/oauth2/token/
Content-Type: application/x-www-form-urlencoded

grant_type=client_credentials&client_id=YOUR_CLIENT_ID&client_secret=YOUR_CLIENT_SECRET&scope=system/patients.read%20system/allergies.read%20system/allergies.write

Combining Scopes

Scopes can be combined to grant a token access to multiple resources. For example, a token with system/patients.read system/medications.read system/medications.write can read patients and both read and write medications.
Scopes cannot be combined with the apiv2 global scope. A token request must use either specific scopes or apiv2, not both.

Available Scopes

Patient Profile API

ScopeDescription
system/allergies.readRead access to allergies
system/allergies.writeWrite access to allergies
system/allergy_documentation.readRead access to allergy documentation (NKDA)
system/allergy_documentation.writeWrite access to allergy documentation (NKDA)
system/drug_intolerances.readRead access to drug intolerances
system/drug_intolerances.writeWrite access to drug intolerances
system/family_histories.readRead access to family histories
system/family_histories.writeWrite access to family histories
system/histories.readRead access to histories
system/histories.writeWrite access to histories
system/immunizations.readRead access to immunizations
system/immunizations.writeWrite access to immunizations
system/patients.readRead access to patients
system/patients.writeWrite access to patients
system/patient-provider-team-members.readRead access to provider team members
system/patient-provider-team-members.writeWrite access to provider team members
system/problems.readRead access to problems
system/problems.writeWrite access to problems
system/vaccine.readRead access to vaccines
system/vaccine.writeWrite access to vaccines

Patient Document API

ScopeDescription
system/ccda.readRead access to C-CDA documents
system/ccda.writeWrite access to C-CDA documents
system/clinical_documents.readRead access to clinical documents
system/clinical_documents.writeWrite access to clinical documents
system/discontinued_medications.readRead access to discontinued medications
system/discontinued_medications.writeWrite access to discontinued medications
system/document_tags.readRead access to document tags
system/document_tags.writeWrite access to document tags
system/incoming_files.readRead access to incoming files
system/incoming_files.writeWrite access to incoming files
system/injections.readRead access to injections
system/injections.writeWrite access to injections
system/letters.readRead access to letters
system/letters.writeWrite access to letters
system/medication_history_download_fills.readRead access to medication history download fills
system/medication_history_download_fills.writeWrite access to medication history download fills
system/medication_history_downloads.readRead access to medication history downloads
system/medication_history_downloads.writeWrite access to medication history downloads
system/medication_refills.readRead access to medication refills
system/medication_refills.writeWrite access to medication refills
system/medications.readRead access to medications
system/medications.writeWrite access to medications
system/non_visit_notes.readRead access to non-visit notes
system/non_visit_notes.writeWrite access to non-visit notes
system/patient_form_requests.readRead access to patient form requests
system/patient_form_requests.writeWrite access to patient form requests
system/patient_form_submissions.readRead access to patient form submissions
system/patient_form_submissions.writeWrite access to patient form submissions
system/patient_forms.readRead access to patient forms
system/patient_forms.writeWrite access to patient forms
system/report_types.readRead access to report types
system/report_types.writeWrite access to report types
system/reports.readRead access to reports
system/reports.writeWrite access to reports
system/visit_note_templates.readRead access to visit note templates
system/visit_note_templates.writeWrite access to visit note templates
system/visit_note_types.readRead access to visit note types
system/visit_note_types.writeWrite access to visit note types
system/visit_notes.readRead access to visit notes
system/visit_notes.writeWrite access to visit notes
system/vitals.readRead access to vitals
system/vitals.writeWrite access to vitals

Orders API

ScopeDescription
system/ancillary_companies.readRead access to ancillary companies
system/ancillary_companies.writeWrite access to ancillary companies
system/cardiac_centers.readRead access to cardiac centers
system/cardiac_centers.writeWrite access to cardiac centers
system/cardiac_order_tests.readRead access to cardiac order tests
system/cardiac_order_tests.writeWrite access to cardiac order tests
system/cardiac_orders.readRead access to cardiac orders
system/cardiac_orders.writeWrite access to cardiac orders
system/imaging_centers.readRead access to imaging centers
system/imaging_centers.writeWrite access to imaging centers
system/imaging_order_tests.readRead access to imaging order tests
system/imaging_order_tests.writeWrite access to imaging order tests
system/imaging_orders.readRead access to imaging orders
system/imaging_orders.writeWrite access to imaging orders
system/lab_facility_identifiers.readRead access to lab facility identifiers
system/lab_facility_identifiers.writeWrite access to lab facility identifiers
system/lab_order_compendiums.readRead access to lab order compendiums
system/lab_order_compendiums.writeWrite access to lab order compendiums
system/lab_order_sets.readRead access to lab order sets
system/lab_order_sets.writeWrite access to lab order sets
system/lab_order_tests.readRead access to lab order tests
system/lab_order_tests.writeWrite access to lab order tests
system/lab_orders.readRead access to lab orders
system/lab_orders.writeWrite access to lab orders
system/lab_vendor_integrations.readRead access to lab vendor integrations
system/lab_vendor_integrations.writeWrite access to lab vendor integrations
system/lab_vendor_patient_sites.readRead access to lab vendor patient sites
system/lab_vendor_patient_sites.writeWrite access to lab vendor patient sites
system/lab_vendors.readRead access to lab vendors
system/lab_vendors.writeWrite access to lab vendors
system/pulmonary_centers.readRead access to pulmonary centers
system/pulmonary_centers.writeWrite access to pulmonary centers
system/pulmonary_order_tests.readRead access to pulmonary order tests
system/pulmonary_order_tests.writeWrite access to pulmonary order tests
system/pulmonary_orders.readRead access to pulmonary orders
system/pulmonary_orders.writeWrite access to pulmonary orders
system/sleep_centers.readRead access to sleep centers
system/sleep_centers.writeWrite access to sleep centers
system/sleep_order_tests.readRead access to sleep order tests
system/sleep_order_tests.writeWrite access to sleep order tests
system/sleep_orders.readRead access to sleep orders
system/sleep_orders.writeWrite access to sleep orders

Messaging API

ScopeDescription
system/message_threads.readRead access to message threads
system/message_threads.writeWrite access to message threads
system/thread_members.readRead access to thread members
system/thread_members.writeWrite access to thread members
system/thread_messages.readRead access to thread messages
system/thread_messages.writeWrite access to thread messages

Scheduling API

ScopeDescription
system/appointment_types.readRead access to appointment types
system/appointment_types.writeWrite access to appointment types
system/appointments.readRead access to appointments
system/appointments.writeWrite access to appointments
system/recurring_event_groups.readRead access to recurring event groups
system/recurring_event_groups.writeWrite access to recurring event groups

Insurance API

ScopeDescription
system/insurance_companies.readRead access to insurance companies
system/insurance_companies.writeWrite access to insurance companies
system/insurance_plans.readRead access to insurance plans
system/insurance_plans.writeWrite access to insurance plans

Billing API

ScopeDescription
system/billing_codes.readRead access to billing codes
system/billing_codes.writeWrite access to billing codes
system/bills.readRead access to bills
system/bills.writeWrite access to bills

Practice API

ScopeDescription
system/contacts.readRead access to contacts
system/contacts.writeWrite access to contacts
system/delegate_permissions.readRead access to delegate permissions
system/delegate_permissions.writeWrite access to delegate permissions
system/handouts.readRead access to handouts
system/handouts.writeWrite access to handouts
system/medication_order_templates.readRead access to medication order templates
system/medication_order_templates.writeWrite access to medication order templates
system/office_staff.readRead access to office staff
system/office_staff.writeWrite access to office staff
system/physicians.readRead access to physicians
system/physicians.writeWrite access to physicians
system/practice_medications.readRead access to practice medications
system/practice_medications.writeWrite access to practice medications
system/practices.readRead access to practices
system/practices.writeWrite access to practices
system/print_headers.readRead access to print headers
system/print_headers.writeWrite access to print headers
system/service_locations.readRead access to service locations
system/service_locations.writeWrite access to service locations
system/staff_groups.readRead access to staff groups
system/staff_groups.writeWrite access to staff groups

Reference Data API

These resources are constant values provided for reference purposes and cannot be updated. They are all read-only.
ScopeDescription
system/languages.readRead access to languages
system/packaged_medication_labelers.readRead access to packaged medication labelers
system/packaged_medications.readRead access to packaged medications
system/pharmacies.readRead access to pharmacies
system/reference_medications.readRead access to reference medications