Utilization Management vs. Prior Authorization: What's the Difference

When providers talk about "prior auth," they're usually describing a single painful interaction: submitting documentation before a drug gets approved. But prior authorization is just one tool in a much larger system called utilization management — and understanding the whole system changes how you respond to it.

Knowing the vocabulary isn't just academic. It tells you what to expect at different points in the care cycle and how to position documentation to survive each one.

What Utilization Management Actually Is

Utilization management (UM) is the set of processes payers use to ensure that medical services are appropriate, necessary, and cost-effective before, during, and after care is delivered. It's a framework — prior authorization is one tool inside that framework, not the whole thing.

The URAC definition describes UM as "a set of techniques used by or on behalf of purchasers of health care benefits to manage health care costs by influencing patient care decision-making through case-by-case assessments of the appropriateness of care prior to its provision."

That last phrase — "prior to its provision" — applies specifically to prior authorization. But UM also includes tools that operate during and after care delivery. That's the full picture.

The Five Main UM Tools

1. Prior Authorization

The one everyone knows. A request submitted before a drug is dispensed or a service is delivered. The payer reviews the clinical rationale and either approves, denies, or requests more information. For biologics, this is where most PA staff time goes.

Prior auth is a proactive tool — it gates access before anything happens. That's why it's the most friction-generating part of UM from a provider perspective. It can delay care by days or weeks while the payer decides.

2. Concurrent Review

Concurrent review happens while care is already being delivered — most commonly in inpatient or specialty drug infusion settings. The payer reviews ongoing treatment to determine whether continued authorization is warranted.

For biologics administered in an infusion center, concurrent review may apply mid-course. The question being asked: is the patient still responding? Is continued treatment still medically necessary? Documentation that captures treatment response — not just disease severity at initiation — is relevant here.

3. Retrospective Review

Retrospective review happens after the fact. A claim comes in and the payer reviews whether the service was appropriate, even though it's already been delivered. This is more common in emergency or inpatient contexts, but it shows up with biologics when claims are submitted without prior authorization and the payer audits for medical necessity after payment.

A denied retrospective review results in a recoupment demand — the payer asks for money back. These are expensive surprises that good PA workflows prevent entirely.

4. Step Therapy

Step therapy requires patients to try lower-cost or preferred treatments before a higher-tier drug gets approved. It's embedded within prior authorization requirements — you can't get the biologic approved without documenting that the required steps were tried and failed — but it's worth treating as its own concept.

Step therapy is where the specific language in your PA documentation matters most. A claim that says "patient failed methotrexate" without specifying dose, duration, and reason for discontinuation often gets kicked back as insufficient. The step has to be documented, not just mentioned.

5. Quantity Limits

Quantity limits cap how much of a drug can be dispensed in a given period — often 30 or 90 days. For self-administered biologics like adalimumab or etanercept, quantity limits determine how many pens or prefilled syringes the patient can get at once. Exceeding the limit without a separate authorization triggers a coverage issue at the pharmacy.

For infused biologics, dosing frequency limits serve the same function. Infliximab at escalated dosing intervals, for instance, often requires a separate authorization for the modified dosing schedule.

Why the UM Framework Matters for Providers

Once you see UM as a system, payer behavior becomes more predictable. Each tool maps to a specific intervention point. That lets you build documentation proactively rather than reactively.

A practice that only thinks about prior authorization will often get blindsided by concurrent review requests for ongoing infusion therapy. Or it will get hit with retrospective denials when urgent situations bypassed the PA process. Thinking in terms of UM rather than just PA creates a complete picture of where friction can appear.

There's also a strategic dimension. Payers are increasingly transparent about their UM criteria and clinical guidelines — partly because of CMS transparency requirements, partly because of pressure from state insurance commissioners. When you know what criteria a payer applies at each stage, you can structure documentation to address those criteria before they become a problem.

UM Automation Is Accelerating — On Both Sides

Payers are deploying AI and machine learning to scale their UM operations. Research published in Health Affairs has documented the growing use of automated decision tools in PA processing — systems that flag requests for denial before a human ever reviews them based on pattern matching against historical claims data.

This creates a real problem: if an AI system flags your submission because it matches the pattern of a prior denial (even if the clinical case is different), the submission may be denied before a clinician reviews it. The appeal then requires human review — which is exactly what should have happened initially.

That's not an argument against engaging with UM. It's an argument for documentation that explicitly addresses the criteria that automated systems check: diagnosis specificity, step therapy completion, quantified disease severity, safety lab documentation. Submissions that look complete and specific to an automated system are less likely to get auto-flagged.

How Providers Can Use UM Knowledge Strategically

The most actionable thing practices can do with this understanding is build UM checkpoints into their workflow — not just PA checkpoints.

Before initiating a biologic, map the patient's expected UM touchpoints: What does PA require? Is concurrent review likely given the treatment setting? Does the dosing schedule trigger quantity limit issues? Knowing these in advance means the clinical team captures the right data from the start rather than scrambling when a payer requests something mid-treatment.

For step therapy specifically, documentation should be built at the time of prior therapy — not reconstructed later. A note that says "patient tried methotrexate 15mg weekly for 8 weeks, discontinued due to hepatotoxicity (ALT 3x ULN on date X)" is far more durable in a PA context than a summary written months after the fact.

Retrospective review risk is managed by maintaining a clean PA record. If a biologic gets administered in a situation where prior authorization wasn't obtained, document the urgency of the situation contemporaneously and initiate a retroactive authorization request immediately. Payers that allow retro auth generally require it within 24–48 hours of the service.

Where Documentation Fits in the UM System

Documentation is the thread that runs through every UM tool. Prior authorization lives or dies on the quality of the submitted documentation. Concurrent review depends on captured treatment response data. Retrospective review is only survivable with contemporaneous clinical records. Step therapy is only proven with detailed prior therapy documentation.

Luma's focus is the documentation layer of UM — specifically the prior authorization documentation for biologics, where the clinical complexity is highest and the documentation requirements are most specific. Building documentation that addresses all five UM tools from the start — not just the immediate PA question — produces submissions that hold up at every stage.

Related posts on the Luma blog cover specific aspects of biologic PA documentation in more depth.

Sources: URAC, Utilization Management Standards (urac.org); CMS, Health Plan Quality and Supervision, Utilization Management overview (cms.gov); Schulman M et al., "Automated Utilization Management and Prior Authorization Denials," Health Affairs 2023 (healthaffairs.org); American Medical Association, "Prior Authorization and Utilization Management Reform" (ama-assn.org); AHIP, "Utilization Management in Health Plans" (ahip.org).