Healthcare · Patient Access

How Prior Authorization Works: From Order to Decision

A step-by-step walkthrough of prior authorization — the order, the coverage requirement, documentation, submission, payer review, additional information, and follow-up.

Author
Quaspar Research
Published
September 21, 2026
Last reviewed
Last reviewed September 21, 2026
Reading time
9 min read
Article contents

Regulatory information can change. This resource is educational and should not be treated as legal, clinical, or regulatory advice. Consult the applicable primary guidance and qualified professionals for decisions affecting your organization. Last reviewed September 21, 2026.

Definition

Prior authorization

A payer's requirement that a service, item, or medication be reviewed and approved before it is delivered, in order for coverage to apply under the terms of the plan. Requirements, criteria, and timelines differ by payer and by plan.

The path from order to decision

Use this as a mapping aid before deciding what to automate.

  1. 01A clinician orders a service, item, or medication
  2. 02Staff determine whether the patient's plan requires authorization for that order
  3. 03The applicable criteria and required documentation are identified
  4. 04Clinical and administrative documentation is assembled
  5. 05The request is submitted through the payer's accepted channel
  6. 06The payer reviews the request
  7. 07The payer may request additional information
  8. 08A decision is returned: approved, denied, or pending further review
  9. 09Staff schedule, appeal, resubmit, or notify the patient based on the outcome

Illustrative sequence; actual steps and timelines vary by payer, plan, and setting.

Where time is actually lost

Requirement discovery

Confirming whether authorization is needed and which criteria apply for this plan and this order.

Document assembly

Locating notes, imaging, prior therapy history, and codes that already exist across systems.

Channel friction

Different payers accept different submission paths, so staff move between portals, forms, and phone.

Status limbo

A pending request has no owner unless someone checks it, so delays surface late.

What CMS is changing

CMS has been moving this exchange toward standardized APIs. Under CMS-0057-F, impacted payers must support a Prior Authorization API, and the payer's response must approve the request with an end point for the authorization, deny it with a specific reason, or request the additional information needed.

The American Medical Association continues to publish practice resources on the administrative burden of prior authorization and on reform efforts. Treat advocacy material as a professional perspective rather than a regulatory requirement.

A follow-up discipline that works without new software

  • Name an owner for every pending request
  • Set an expected response date at submission time
  • Re-check status on a fixed cadence rather than ad hoc
  • Log the reason for every denial in a consistent field
  • Review recurring denial reasons monthly
  • Track how often additional information was requested and why

What should stay with people

Judging whether clinical criteria are met, responding to a denial, choosing to appeal, and communicating with the patient are professional decisions. Software can prepare the packet, surface the requirement, and keep the case visible; the decision and the accountability stay with qualified staff.

Sources

Authoritative references

Rules, standards, and guidance can change. The links below were reviewed on September 21, 2026.

  1. 1Centers for Medicare & Medicaid Services. Electronic Prior Authorization
  2. 2Centers for Medicare & Medicaid Services. CMS Interoperability and Prior Authorization Final Rule (CMS-0057-F)
  3. 3American Medical Association. Prior authorization practice resources
  4. 4CAQH. CAQH Index