Authorizations for FHIR Package Workflow

Prerequisites

You must have enabled the business user workflow to configure the authorization. For more information, see Business User Workflow.

Authorization for FHIR Package Management

You must create a role using the HealthData_Package_DesignTime role template. For more information, see SAP Health Data Services for FHIR Preshipped SAP BTP Role Templates.

Authorization for FHIR Package Provisioning

You must perform the following steps to get the authorization to provision a FHIR package:

Configure the granular level authorization for FHIR package provisioning by performing the following:

Create a RolePermission:

HTTP Request

POST [base]/RolePermission

Sample Code

{
    "resourceType": "RolePermission",
    "url": "https://sap.com/healthcare/fhir/RolePermission/PackageRuntimeAuth",
    "version": "1.0.0",
    "typeLevelPermission": [
        {
            "resourceType": "StructureDefinition",
            "action": [
                {
                    "system": "http://hl7.org/fhir/restful-interaction",
                    "code": "read",
                    "display": "read"
                }
            ]
        },
        {
            "resourceType": "CapablilityStatement",
            "action": [
                {
                    "system": "http://hl7.org/fhir/restful-interaction",
                    "code": "read",
                    "display": "read"
                }
            ]
        },
        {
            "resourceType": "SearchParameter",
            "action": [
                {
                    "system": "http://hl7.org/fhir/restful-interaction",
                    "code": "read",
                    "display": "read"
                }
            ]
        },
        {
            "resourceType": "$inlineSnapshot",
            "action": [
                {
                    "system": "http://hl7.org/fhir/restful-interaction",
                    "code": "read",
                    "display": "read"
                }
            ]
        },
        {
            "resourceType": "$mergeinlineSnapshot",
            "action": [
                {
                    "system": "http://hl7.org/fhir/restful-interaction",
                    "code": "read",
                    "display": "read"
                }
            ]
        }
    ]
}

Create a GroupPolicy:

HTTP Request

POST [base]/GroupPolicy

Sample Code

{
    "resourceType": "GroupPolicy",
    "url": "https://sap.com/healthcare/fhir/GroupPolicy/PackageRuntimeGroupPolicy",
    "version": "1.0.0",
    "name": "Package_Provisioning_Auth",
    "description": "This policy defines the read access for the resources defined in role permission",
    "period": {
        "start": "2021-04-01"
    },
    "rolePermission": [
        "https://sap.com/healthcare/fhir/RolePermission/PackageRuntimeAuth|1.0.0"
    ]
}

Create a role using the HealthData_Package_Runtime role template. For more information, see Create Roles for Applications Using Existing Role Templates.
During the creation of a role, in the Configure Attributes tab, perform the following:
- For the grouppolicy attribute, choose Static from the Source field and enter the GroupPolicy URL and latest version with the piped operator in the Values field, for example, https://sap.com/healthcare/fhir/GroupPolicy/PackageRuntimeGroupPolicy|1.0.0.

Path Parameters

base: Service endpoint to interact with FHIR resources. For more information, see Service Endpoint.