Managing Authorization Entities

The authorization capabilities are used to govern access to SAP Health Data Services for FHIR.

You can manage the authorization entities by using the following examples:

  • Providing access to only read and search a Patient and a RelatedPerson.

    • A RolePermission to read and search a Patient and a RelatedPerson:

    • The GroupPolicy to define access to read and search Patient and RelatedPerson:

  • Providing access to only read and search all resources.

    • A RolePermission to read and search all resources:

    • The GroupPolicy to define access to read and search all resources:

  • Providing access to only read and search a Patient and to update and create an Encounter.

    • A RolePermission to read and search a Patient and to update and create an Encounter:

    • The GroupPolicy to define access to read and search a Patient and to update and create an Encounter:

  • Providing access to only perform the billing operation at an account type level.

    • A RolePermission to perform the billing operation at an account type level:

    • The GroupPolicy to define access to perform billing operation at an account type level:

  • Providing access to only perform the billing operation at a system level.

    • A RolePermission to perform the billing operation at a system level:

    • The GroupPolicy to define access to perform billing operation at a system level: