---
title: "Set Health System Access"
method: POST
path: "/api/asclepius/admin/health-systems/{hs_id}/access"
tags: ["asclepius-admin"]
---

# Set Health System Access

`POST /api/asclepius/admin/health-systems/{hs_id}/access`

## Request

- Base URL: `https://app.archangelhealth.ai` (the document declares no server; this is the origin it was published from)
- URL: `https://app.archangelhealth.ai/api/asclepius/admin/health-systems/{hs_id}/access`
- Auth: none declared

Deactivate (or restore) portal access. ``username`` scopes it to one
account; omitting it applies to the whole health system.

Both ``hs_portal_users.active`` and ``health_systems.active`` existed from
the first build and nothing ever wrote them — they were columns for a
revocation path that did not exist. ``require_hs_portal`` already rejects an
inactive account on every request, so flipping the flag ends live sessions
too.

## Path parameters

- `hs_id` string, required

## Headers

- `authorization` string, nullable

## Request body

- HsAccessRequest
  - `username` string, nullable
  - `active` boolean, nullable

## Response `200`

Successful Response

- unknown

## Other responses

- `422`: Validation Error

---

[API](https://skmtc.dev/archangelhealth/apis/archangel-health-surgical-patient-platform.md) - [All operations](https://skmtc.dev/archangelhealth/apis/archangel-health-surgical-patient-platform/llms.txt) - [OpenAPI document](https://skmtc.dev/archangelhealth/apis/archangel-health-surgical-patient-platform/revisions/3514f4e119da?raw)