HL7 Version 3 Standard: Healthcare (Security and Privacy) Access Control Catalog, Release 3

Role-based access control (RBAC) restricts network access based on an individual’s role in an organisation.

This document describes updates to the normative HL7 RBAC Permission Catalog standard.

The updates add high-level concepts and vocabulary of attribute-based access control and relationship-based access control to the previous RBAC Permission Catalog vocabulary, which extends the flexibility of access control.

Main sections:

· Introduction

· Conformance

· Scope

· Extensibility

· Operation definitions

· Object definitions

· Permission constraints

· Order entry task

· Review documentation task

· Perform documentation task

· Scheduling task

· Administration task

· ABAC indicators

· ABAC permission table

· REBAC indicators

· REBAC permission table