OIO BPP Role Role to Privilege mapping

OIO BPP role groups several privileges in the eHealth infrastructure. In https://ehealth-dk.atlassian.net/wiki/spaces/EDTW/pages/291176482/Token+Based+Security#Privilege-Roles there is a description of the OIO BPP role names in the eHealth Infrastructure. This page lists for each role the set of privileges for that role.

	OIO BPP Role Name	Danish Name	English Name	Privileges
1	`urn:dk:sundhed:ehealth:role:careteam_administrator`	Care Team administrator Kan håndtere Care Teams i den telemedicinske løsning	Care Team Administrator	CareTeam.create CareTeam.delete CareTeam.patch CareTeam.read CareTeam.search CareTeam.update CareTeam.write Organization.read Organization.search Practitioner.read Practitioner.search
2	`urn:dk:sundhed:ehealth:role:citizen_enroller`	Borgeropretter Kan oprette borger i telemedicinsk forløb og tildele borger en foruddefineret plan	Citizen Enroller	ActivityDefinition.read ActivityDefinition.search CarePlan$$suggest-care-teams CarePlan$$update-care-teams CarePlan$$update.responsibility CarePlan.patch CarePlan.read CarePlan.search CarePlan.update CareTeam.read CareTeam.search CommunicationRequest.create CommunicationRequest.read CommunicationRequest.search CommunicationRequest.update Condition.create Condition.read Condition.search Consent.create Consent.patch Consent.read Consent.search Consent.update DocumentReference.read DocumentReference.search EpisodeOfCare$$create-episode-of-care EpisodeOfCare$$is-context-allowed EpisodeOfCare$$update-care-teams EpisodeOfCare.create EpisodeOfCare.delete EpisodeOfCare.patch EpisodeOfCare.read EpisodeOfCare.search EpisodeOfCare.update EpisodeOfCare.write Library.read Library.search Organization.read Organization.search Patient$$createPatientFromPerson Patient.read Person$$match PlanDefinition$$apply PlanDefinition.read PlanDefinition.search Practitioner.read Practitioner.search ProcedureRequest.create ProcedureRequest.delete ProcedureRequest.patch ProcedureRequest.read ProcedureRequest.search ProcedureRequest.update ProcedureRequest.write Questionnaire.read Questionnaire.search RelatedPerson.create RelatedPerson.delete RelatedPerson.patch RelatedPerson.read RelatedPerson.search RelatedPerson.update RelatedPerson.write
3	`urn:dk:sundhed:ehealth:role:clinical_administrator`	Pakke- og forløbsbygger Kan udvælge Spørgeskema/Måling, sammensætte indholdet af pakker og forløb, navngive pakke/forløb og tilrette de generelle Grænseværdier	Clinical Administrator	ActivityDefinition.create ActivityDefinition.delete ActivityDefinition.patch ActivityDefinition.read ActivityDefinition.search ActivityDefinition.update ActivityDefinition.write DocumentReference$$find-document-references DocumentReference.create DocumentReference.delete DocumentReference.patch DocumentReference.read DocumentReference.search DocumentReference.update DocumentReference.write Library.read Library.search Organization.read Organization.search PlanDefinition$$apply PlanDefinition.create PlanDefinition.delete PlanDefinition.patch PlanDefinition.read PlanDefinition.search PlanDefinition.update PlanDefinition.write Questionnaire.create Questionnaire.read Questionnaire.search
4	`urn:dk:sundhed:ehealth:role:clinical_supporter`	Klinisk supporter Kan undersøge hændelser ud fra div. kriterier fx borger, bruger, dato, hændelse	Clinical Supporter	$$SSLFindOrCreateParty Communication.read RestrictionCategory$$measuring-support RestrictionCategory$$none SSLCatalogueItem.read SSLOrder.read SSLOrderLine.read SSLParty.read SSLProblem.read SSLProblem.write SSLTraceLine.read Task.create Task.delete Task.patch Task.read Task.search Task.update Task.write
5	`urn:dk:sundhed:ehealth:role:clinical_viewer`	Klinisk se adgang Kan se telemedicinske Måledata for at kunne understøtte dagligt ikke-telemedicinsk arbejde rettet på konkret borger	Clinical Viewer	$$search-measurements ActionGiudance.read ActionGuidance.read ActivityDefinition.read ActivityDefinition.search CarePlan.read CarePlan.search CareTeam.read CareTeam.search ClinicalImpression.read ClinicalImpression.search Communication.create Communication.patch Communication.read Communication.search Communication.update Communication.write CommunicationRequest.create CommunicationRequest.read CommunicationRequest.search CommunicationRequest.update Condition.read Condition.search Consent.read Consent.search Device.read Device.search DeviceMetric.read DeviceMetric.search DeviceUseStatement.read DeviceUseStatement.search DocumentReference.read DocumentReference.search EpisodeOfCare.read EpisodeOfCare.search Library$$evaluate Library.read Media.read Media.search Observation.read Observation.search Organization.read Patient.read PlanDefinition.read PlanDefinition.search Practitioner.read Practitioner.search ProcedureRequest.read ProcedureRequest.search Questionnaire.read Questionnaire.search QuestionnaireResponse.read QuestionnaireResponse.search RelatedPerson.read RestrictionCategory$$measurement-monitoring RestrictionCategory$$measuring-support RestrictionCategory$$none Task.create Task.delete Task.patch Task.read Task.search Task.update Task.write View.read
6	`urn:dk:sundhed:ehealth:role:incident_manager`	Support samarbejdspartner Kan håndtere fejlmelding ud fra lokale aftaler	Incident Manager	$$SSLFindOrCreateParty Communication.read RestrictionCategory$$measuring-support RestrictionCategory$$none SSLCatalogueItem.read SSLOrder.read SSLOrder.write SSLOrderLine.read SSLOrderLine.write SSLParty.read SSLProblem.read SSLProblem.write SSLTraceLine.read Task.create Task.delete Task.patch Task.read Task.search Task.update Task.write
7	`urn:dk:sundhed:ehealth:role:incident_reporter`	Fejlmelder Kan indberette fejl på telemedicinske løsninger og udstyr	Incident Reporter	$$SSLFindOrCreateParty Communication.create Communication.patch Communication.read Communication.update Communication.write SSLAnnotation.read SSLCatalogue.read SSLCatalogueItem.read SSLOrder.write SSLOrderLine.write SSLParty.read SSLProblem.read
8	`urn:dk:sundhed:ehealth:role:monitoring_adjuster`	Monitoreringstilretter Kan håndtere og ændre i Måleregime, Grænseværdier og telemedicinsk forløb/pakke til borger	Monitoring Adjuster	$$search-measurements $$submit-measurement ActivityDefinition.read ActivityDefinition.search Appointment.read Appointment.write CarePlan$$suggest-care-teams CarePlan$$update-care-teams CarePlan$$update.responsibility CarePlan.create CarePlan.delete CarePlan.patch CarePlan.read CarePlan.search CarePlan.update CarePlan.write CareTeam.read CareTeam.search ClinicalImpression.read Communication.create Communication.patch Communication.read Communication.search Communication.update Communication.write CommunicationRequest.create CommunicationRequest.read CommunicationRequest.search CommunicationRequest.update Condition.read Device.read Device.search DeviceMetric.read DeviceMetric.search DeviceUseStatement.read DeviceUseStatement.search DocumentReference.read DocumentReference.search EpisodeOfCare$$update-care-teams EpisodeOfCare.patch EpisodeOfCare.read Media.read Observation.read Organization.read Organization.search Patient.read Patient.write PlanDefinition.read PlanDefinition.search Practitioner.read Practitioner.search ProcedureRequest.create ProcedureRequest.delete ProcedureRequest.patch ProcedureRequest.read ProcedureRequest.search ProcedureRequest.update ProcedureRequest.write Questionnaire.read Questionnaire.search QuestionnaireResponse.read RelatedPerson.create RelatedPerson.delete RelatedPerson.patch RelatedPerson.read RelatedPerson.search RelatedPerson.update RelatedPerson.write RestrictionCategory$$measurement-monitoring RestrictionCategory$$measuring-support RestrictionCategory$$none Task.create Task.delete Task.patch Task.read Task.search Task.update Task.write
9	`urn:dk:sundhed:ehealth:role:monitoring_assistor`	Monitoreringsmedhjælper Kan håndtere Måledata og kommunikation til/fra borger	Monitoring Assistor	$$search-measurements $$submit-measurement ActivityDefinition.read Appointment.read Appointment.write CarePlan$$suggest-care-teams CarePlan$$update-care-teams CarePlan$$update.responsibility CarePlan.create CarePlan.delete CarePlan.patch CarePlan.read CarePlan.search CarePlan.update CarePlan.write CareTeam.read CareTeam.search ClinicalImpression.create ClinicalImpression.delete ClinicalImpression.patch ClinicalImpression.read ClinicalImpression.search ClinicalImpression.update ClinicalImpression.write Communication.create Communication.delete Communication.patch Communication.read Communication.search Communication.update Communication.write CommunicationRequest.create CommunicationRequest.read CommunicationRequest.search CommunicationRequest.update Condition.read Condition.search DocumentReference.read DocumentReference.search EpisodeOfCare.read EpisodeOfCare.search Library$$evaluate Library.read Library.search Media.read Observation.read Organization.read Organization.search Patient.read PlanDefinition.read PlanDefinition.search Practitioner.read Practitioner.search ProcedureRequest.create ProcedureRequest.delete ProcedureRequest.patch ProcedureRequest.read ProcedureRequest.search ProcedureRequest.update ProcedureRequest.write Questionnaire.read Questionnaire.search QuestionnaireResponse.read RestrictionCategory$$measurement-monitoring RestrictionCategory$$measuring-support RestrictionCategory$$none Task.create Task.delete Task.patch Task.read Task.search Task.update Task.write
10	`urn:dk:sundhed:ehealth:role:order_placer`	Bestiller af udstyr Håndterer bestilling af telemedicinsk udstyr ud fra lokale aftaler	Order Placer	$$SSLFindOrCreateParty ActivityDefinition.read ActivityDefinition.search CarePlan.read CarePlan.search Communication.create Communication.delete Communication.patch Communication.read Communication.search Communication.update Communication.write Condition.read Condition.search Consent.create Consent.patch Consent.read Consent.search Consent.update Device.read DeviceMetric.read DeviceUseStatement.read DocumentReference.read DocumentReference.search EpisodeOfCare.read EpisodeOfCare.search Patient.read Patient.search PlanDefinition.read PlanDefinition.search RestrictionCategory$$measuring-support RestrictionCategory$$none SSLAnnotation.read SSLBlackList.read SSLBlackList.write SSLCatalogue.read SSLCatalogueItem.read SSLOrder.create SSLOrder.read SSLOrder.write SSLOrderLine.create SSLOrderLine.read SSLOrderLine.write SSLPackage.read SSLParty.read SSLTraceLine.read SSLWhiteList.read Task.create Task.delete Task.patch Task.read Task.search Task.update Task.write
11	`urn:dk:sundhed:ehealth:role:questionnaire_editor`	Sundhedsfaglig spørgeskemaeditor Kan udarbejde, ændre og teste Spørgeskema	Questionnaire Editor	$$transform-from-QFDD $$transform-to-QFDD ActionGiudance.read ActionGiudance.write ActionGuidance.read ActionGuidance.write DocumentReference$$find-document-references DocumentReference.create DocumentReference.delete DocumentReference.patch DocumentReference.read DocumentReference.search DocumentReference.update DocumentReference.write Organization.read Practitioner.read Questionnaire.create Questionnaire.patch Questionnaire.read Questionnaire.search Questionnaire.update View.read View.write
12	`urn:dk:sundhed:ehealth:role:report_user`	Nøgletalsmedarbejder Kan udføre datatrækning, rapporter og statistik	Report User	$$fetch-careplan-customization-stats $$fetch-careplan-duration-stats $$fetch-careplans-by-patient $$fetch-careteam-stats $$fetch-episodeofcare-stats $$fetch-measurement-stats $$fetch-patient-devices $$fetch-patient-gdpr $$fetch-patient-total $$fetch-practitioner-gdpr $$fetch-practitioner-stats $$fetch-ssl-orders Binary.read Organization.read Patient.read Practitioner.read RelatedPerson.read
13	`urn:dk:sundhed:ehealth:role:service_and_logistics`	Service og logistik samarbejdspartner Kan håndtere bestilling ud fra lokale aftaler	Service and Logistics	$$SSLFindOrCreateParty Communication.read Communication.search Communication.write Device.create Device.patch Device.read Device.update DeviceMetric.create DeviceMetric.patch DeviceMetric.read DeviceMetric.update DeviceUseStatement.create DeviceUseStatement.patch DeviceUseStatement.read DeviceUseStatement.update RestrictionCategory$$measuring-support RestrictionCategory$$none SSLAnnotation.read SSLCatalogue.read SSLCatalogueItem.read SSLOrder.read SSLOrder.write SSLOrderLine.read SSLOrderLine.write SSLParty.read SSLTraceLine.read
14	`urn:dk:sundhed:ehealth:role:ssl_catalogue_annotator`	Katalogopmærker Opmærke varer og serviceydelser i SSL kataloger	Catalogue Annotator	$$SSLFindOrCreateParty SSLAnnotation.read SSLAnnotation.write SSLCatalogue.read SSLCatalogueItem.read SSLParty.read
15	`urn:dk:sundhed:ehealth:role:ssl_catalogue_responsible`	Katalogansvarlig Oprette og vedligeholde SSL kataloger	Catalogue Responsible	$$SSLFindOrCreateParty SSLAnnotation.read SSLAnnotation.write SSLCatalogue.read SSLCatalogue.write SSLCatalogueItem.read SSLCatalogueItem.write SSLParty.read SSLProblem.read SSLProblem.write
16	`urn:dk:sundhed:ehealth:role:ssl_contract_responsible`	Aftaleansvarlig Oprette og rette SSL samarbejdsaftaler	Contract Responsible	$$SSLFindOrCreateParty SSLCatalogue.read SSLCatalogueItem.read SSLContract.read SSLContract.write SSLPackage.create SSLPackage.delete SSLPackage.patch SSLPackage.read SSLParty.read SSLParty.write SSLWhiteList.read SSLWhiteList.write
17	`urn:dk:sundhed:ehealth:role:terminology_administrator`	Terminologiadministrator Oprette og vedligeholde terminologi	Terminology Administrator	CodeSystem.write ConceptMap.write NamingSystem.write ValueSet.write