...
The combination of CVR number (scope) sorIdentifer(regional)/orgUnit(municipal) (and /or careteam must be unique). Failing to comply with this may result in errors. This scheme is to ensure that users cannot have multiple different privileges stated differently. Do note that it is possible to list multiple (valid) privileges in any given PrivilegeGroup.