6.5 Resource Permission - Content

Name	Flags	Card.	Type	Description & Constraints      Filter: Bindings Constraints Obligations
Permission	TU		DomainResource	Access Rules Elements defined in Ancestors: id , meta , implicitRules , language , text , contained , extension , modifierExtension
identifier	Σ	0..*	Identifier	Business Identifier for permission
status	Σ	1..1	code	active | entered-in-error | draft | rejected Binding: Permission Status ( Required )
asserter	Σ	0..1	Reference ( Practitioner | PractitionerRole | Organization | CareTeam | Patient | RelatedPerson | HealthcareService )	The person or entity that asserts the permission
date	Σ	0..*	dateTime	The date that permission was asserted
validity	Σ	0..1	Period	The period in which the permission is active
justification	Σ	0..1	BackboneElement	The asserted justification for using the data
basis	Σ	0..*	CodeableConcept	The regulatory grounds upon which this Permission builds Binding: Consent PolicyRule Codes ( Example )
evidence	Σ	0..*	Reference ( Any )	Justifing rational
combining	?! Σ	1..1	code	deny-overrides | permit-overrides | ordered-deny-overrides | ordered-permit-overrides | deny-unless-permit | permit-unless-deny Binding: Permission Rule Combining ( Required )
rule	Σ C	0..*	BackboneElement	Constraints to the Permission + Rule: If the import element is populated then the type, data, and activity shall not be populated This repeating element order: The order of the rules processing is defined in rule combining selected in .combining element.
import	Σ C	0..1	Reference ( Permission )	Reference to a Permission
type	?! Σ C	0..1	code	deny | permit Binding: Consent Provision Type ( Required )
data	Σ C	0..*	BackboneElement	The selection criteria to identify data that is within scope of this provision
resource	Σ	0..*	BackboneElement	Explicit FHIR Resource references
meaning	Σ	1..1	code	instance | related | dependents | authoredby Binding: Consent Data Meaning ( Required )
reference	Σ	1..1	Reference ( Any )	The actual data reference
resourceType	Σ	0..*	Coding	e.g. Resource Type, Profile, etc Binding: Resource Types ( Extensible )
security	Σ	0..*	Coding	Security tag code on .meta.security
period	Σ	0..1	Period	Timeframe encompasing data create/update
expression	Σ	0..1	Expression	Expression identifying the data
activity	Σ C	0..*	BackboneElement	A description or definition of which activities are allowed to be done on the data
actor		0..*	BackboneElement	Who|what is controlled by this rule
role		0..1	CodeableConcept	How the actor is involved Binding: Participation Role Type ( Extensible )
reference	Σ	0..1	Reference ( Device | Group | CareTeam | Organization | Patient | Practitioner | RelatedPerson | PractitionerRole | DeviceDefinition | Group | HealthcareService )	Authorized actor(s)
action	Σ	0..*	CodeableConcept	Actions controlled by this rule Binding: Type Restful Interaction ( Preferred )
purpose	Σ	0..*	CodeableConcept	The purpose for which the permission is given Binding: PurposeOfUse ( Preferred )
limit		0..*	BackboneElement	What limits apply to the use of the data
control	Σ	0..*	CodeableConcept	What coded limits apply to the use of the data Binding: SecurityControlObservationValue ( Preferred )
tag	Σ	0..*	Coding	The sensitivity codes that must be removed from the data Binding: InformationSensitivityPolicy ( Preferred )
element	Σ	0..*	string	What data elements that must be removed from the data
Documentation for this format

See the Extensions for this resource

<Permission xmlns="http://hl7.org/fhir"> 
 <!-- from Resource: id, meta, implicitRules, and language -->
 <!-- from DomainResource: text, contained, extension, and modifierExtension -->
 <identifier><!-- 0..* Identifier Business Identifier for permission --></identifier>
 <status value="[code]"/><!-- 1..1 active | entered-in-error | draft | rejected -->
 <asserter><!-- 0..1 Reference(CareTeam|HealthcareService|Organization|Patient|
   Practitioner|PractitionerRole|RelatedPerson) The person or entity that asserts the permission --></asserter>
 <date value="[dateTime]"/><!-- 0..* The date that permission was asserted -->
 <validity><!-- 0..1 Period The period in which the permission is active --></validity>
 <justification>  <!-- 0..1 The asserted justification for using the data -->
  <basis><!-- 0..* CodeableConcept The regulatory grounds upon which this Permission builds --></basis>
  <evidence><!-- 0..* Reference(Any) Justifing rational --></evidence>
 </justification>
 <combining value="[code]"/><!-- 1..1 deny-overrides | permit-overrides | ordered-deny-overrides | ordered-permit-overrides | deny-unless-permit | permit-unless-deny -->
 <rule>  <!-- 0..* Constraints to the Permission -->
  <</import>
  <
  <

  <import><!-- I 0..1 Reference(Permission) Reference to a Permission --></import>
  <type value="[code]"/><!-- I 0..1 deny | permit -->
  <data>  <!-- I 0..* The selection criteria to identify data that is within scope of this provision -->

   <resource>  <!-- 0..* Explicit FHIR Resource references -->
    <meaning value="[code]"/><!-- 1..1 instance | related | dependents | authoredby -->
    <reference><!-- 1..1 Reference(Any) The actual data reference --></reference>
   </resource>
   <resourceType><!-- 0..* Coding e.g. Resource Type, Profile, etc --></resourceType>

   <security><!-- 0..* Coding Security tag code on .meta.security --></security>
   <period><!-- 0..1 Period Timeframe encompasing data create/update --></period>
   <expression><!-- 0..1 Expression Expression identifying the data --></expression>
  </data>
  <

  <activity>  <!-- I 0..* A description or definition of which activities are allowed to be done on the data -->

   <actor>  <!-- 0..* Who|what is controlled by this rule -->
    <role><!-- 0..1 CodeableConcept How the actor is involved --></role>
    <|

    <reference><!-- 0..1 Reference(CareTeam|Device|DeviceDefinition|Group|

      HealthcareService|Organization|Patient|Practitioner|PractitionerRole|
      RelatedPerson) Authorized actor(s) --></reference>
   </actor>
   <action><!-- 0..* CodeableConcept Actions controlled by this rule --></action>
   <</purpose>

   <purpose><!-- 0..* CodeableConcept The purpose for which the permission is given  --></purpose>

  </activity>
  <limit>  <!-- 0..* What limits apply to the use of the data -->
   <</control>
   <</tag>

   <control><!-- 0..* CodeableConcept What coded limits apply to the use of the data  --></control>
   <tag><!-- 0..* Coding The sensitivity codes that must be removed from the data  --></tag>

   <element value="[string]"/><!-- 0..* What data elements that must be removed from the data -->
  </limit>
 </rule>
</Permission>

{
  "resourceType" : "Permission",
  // from Resource: id, meta, implicitRules, and language
  // from DomainResource: text, contained, extension, and modifierExtension
  "identifier" : [{ Identifier }], // Business Identifier for permission
  "status" : "<code>", // R!  active | entered-in-error | draft | rejected
  "asserter" : { Reference(CareTeam|HealthcareService|Organization|Patient|
   Practitioner|PractitionerRole|RelatedPerson) }, // The person or entity that asserts the permission
  "date" : ["<dateTime>"], // The date that permission was asserted
  "validity" : { Period }, // The period in which the permission is active
  "justification" : { // The asserted justification for using the data
    "basis" : [{ CodeableConcept }], // The regulatory grounds upon which this Permission builds
    "evidence" : [{ Reference(Any) }] // Justifing rational
  },
  "combining" : "<code>", // R!  deny-overrides | permit-overrides | ordered-deny-overrides | ordered-permit-overrides | deny-unless-permit | permit-unless-deny
  "rule" : [{ // Constraints to the Permission
    "
    "
    "

    "import" : { Reference(Permission) }, // I Reference to a Permission
    "type" : "<code>", // I deny | permit
    "data" : [{ // I The selection criteria to identify data that is within scope of this provision

      "resource" : [{ // Explicit FHIR Resource references
        "meaning" : "<code>", // R!  instance | related | dependents | authoredby
        "reference" : { Reference(Any) } // R!  The actual data reference
      }],
      "resourceType" : [{ Coding }], // e.g. Resource Type, Profile, etc

      "security" : [{ Coding }], // Security tag code on .meta.security
      "period" : { Period }, // Timeframe encompasing data create/update
      "expression" : { Expression } // Expression identifying the data
    }],
    "

    "activity" : [{ // I A description or definition of which activities are allowed to be done on the data

      "actor" : [{ // Who|what is controlled by this rule
        "role" : { CodeableConcept }, // How the actor is involved
        "|

        "reference" : { Reference(CareTeam|Device|DeviceDefinition|Group|

      HealthcareService|Organization|Patient|Practitioner|PractitionerRole|
      RelatedPerson) } // Authorized actor(s)
      }],
      "action" : [{ CodeableConcept }], // Actions controlled by this rule
      "

      "purpose" : [{ CodeableConcept }] // The purpose for which the permission is given 

    }],
    "limit" : [{ // What limits apply to the use of the data
      "
      "

      "control" : [{ CodeableConcept }], // What coded limits apply to the use of the data 
      "tag" : [{ Coding }], // The sensitivity codes that must be removed from the data 

      "element" : ["<string>"] // What data elements that must be removed from the data
    }]
  }]
}

@prefix fhir: <http://hl7.org/fhir/> .


[ a fhir:Permission;
  fhir:nodeRole fhir:treeRoot; # if this is the parser root

  # from 
  # from 

  # from Resource: fhir:id, fhir:meta, fhir:implicitRules, and fhir:language
  # from DomainResource: fhir:text, fhir:contained, fhir:extension, and fhir:modifierExtension

  fhir:identifier  ( [ Identifier ] ... ) ; # 0..* Business Identifier for permission
  fhir:status [ code ] ; # 1..1 active | entered-in-error | draft | rejected
  fhir:asserter [ Reference(CareTeam|HealthcareService|Organization|Patient|Practitioner|PractitionerRole|
  RelatedPerson) ] ; # 0..1 The person or entity that asserts the permission
  fhir:date  ( [ dateTime ] ... ) ; # 0..* The date that permission was asserted
  fhir:validity [ Period ] ; # 0..1 The period in which the permission is active
  fhir:justification [ # 0..1 The asserted justification for using the data
    fhir:basis  ( [ CodeableConcept ] ... ) ; # 0..* The regulatory grounds upon which this Permission builds
    fhir:evidence  ( [ Reference(Any) ] ... ) ; # 0..* Justifing rational
  ] ;
  fhir:combining [ code ] ; # 1..1 deny-overrides | permit-overrides | ordered-deny-overrides | ordered-permit-overrides | deny-unless-permit | permit-unless-deny
  fhir:rule ( [ # 0..* Constraints to the Permission
    fhir:
    fhir:
    fhir:

    fhir:import [ Reference(Permission) ] ; # 0..1 I Reference to a Permission
    fhir:type [ code ] ; # 0..1 I deny | permit
    fhir:data ( [ # 0..* I The selection criteria to identify data that is within scope of this provision

      fhir:resource ( [ # 0..* Explicit FHIR Resource references
        fhir:meaning [ code ] ; # 1..1 instance | related | dependents | authoredby
        fhir:reference [ Reference(Any) ] ; # 1..1 The actual data reference
      ] ... ) ;
      fhir:resourceType  ( [ Coding ] ... ) ; # 0..* e.g. Resource Type, Profile, etc

      fhir:security  ( [ Coding ] ... ) ; # 0..* Security tag code on .meta.security
      fhir:period [ Period ] ; # 0..1 Timeframe encompasing data create/update
      fhir:expression [ Expression ] ; # 0..1 Expression identifying the data
    ] ... ) ;
    fhir:

    fhir:activity ( [ # 0..* I A description or definition of which activities are allowed to be done on the data

      fhir:actor ( [ # 0..* Who|what is controlled by this rule
        fhir:role [ CodeableConcept ] ; # 0..1 How the actor is involved
        fhir:|
  

        fhir:reference [ Reference(CareTeam|Device|DeviceDefinition|Group|HealthcareService|Organization|Patient|
  Practitioner|PractitionerRole|RelatedPerson) ] ; # 0..1 Authorized actor(s)
      ] ... ) ;
      fhir:action  ( [ CodeableConcept ] ... ) ; # 0..* Actions controlled by this rule
      fhir:purpose  ( [ CodeableConcept ] ... ) ; # 0..* The purpose for which the permission is given
    ] ... ) ;
    fhir:limit ( [ # 0..* What limits apply to the use of the data
      fhir:control  ( [ CodeableConcept ] ... ) ; # 0..* What coded limits apply to the use of the data
      fhir:tag  ( [ Coding ] ... ) ; # 0..* The sensitivity codes that must be removed from the data
      fhir:element  ( [ string ] ... ) ; # 0..* What data elements that must be removed from the data
    ] ... ) ;
  ] ... ) ;
]

Changes from both R4 and R4B

This resource did not exist in Release R4

See the Full Difference for further information

This analysis is available for R4 as XML or JSON and for R4B as XML or JSON .

Name	Flags	Card.	Type	Description & Constraints      Filter: Bindings Constraints Obligations
Permission	TU		DomainResource	Access Rules Elements defined in Ancestors: id , meta , implicitRules , language , text , contained , extension , modifierExtension
identifier	Σ	0..*	Identifier	Business Identifier for permission
status	Σ	1..1	code	active | entered-in-error | draft | rejected Binding: Permission Status ( Required )
asserter	Σ	0..1	Reference ( Practitioner | PractitionerRole | Organization | CareTeam | Patient | RelatedPerson | HealthcareService )	The person or entity that asserts the permission
date	Σ	0..*	dateTime	The date that permission was asserted
validity	Σ	0..1	Period	The period in which the permission is active
justification	Σ	0..1	BackboneElement	The asserted justification for using the data
basis	Σ	0..*	CodeableConcept	The regulatory grounds upon which this Permission builds Binding: Consent PolicyRule Codes ( Example )
evidence	Σ	0..*	Reference ( Any )	Justifing rational
combining	?! Σ	1..1	code	deny-overrides | permit-overrides | ordered-deny-overrides | ordered-permit-overrides | deny-unless-permit | permit-unless-deny Binding: Permission Rule Combining ( Required )
rule	Σ C	0..*	BackboneElement	Constraints to the Permission + Rule: If the import element is populated then the type, data, and activity shall not be populated This repeating element order: The order of the rules processing is defined in rule combining selected in .combining element.
import	Σ C	0..1	Reference ( Permission )	Reference to a Permission
type	?! Σ C	0..1	code	deny | permit Binding: Consent Provision Type ( Required )
data	Σ C	0..*	BackboneElement	The selection criteria to identify data that is within scope of this provision
resource	Σ	0..*	BackboneElement	Explicit FHIR Resource references
meaning	Σ	1..1	code	instance | related | dependents | authoredby Binding: Consent Data Meaning ( Required )
reference	Σ	1..1	Reference ( Any )	The actual data reference
resourceType	Σ	0..*	Coding	e.g. Resource Type, Profile, etc Binding: Resource Types ( Extensible )
security	Σ	0..*	Coding	Security tag code on .meta.security
period	Σ	0..1	Period	Timeframe encompasing data create/update
expression	Σ	0..1	Expression	Expression identifying the data
activity	Σ C	0..*	BackboneElement	A description or definition of which activities are allowed to be done on the data
actor		0..*	BackboneElement	Who|what is controlled by this rule
role		0..1	CodeableConcept	How the actor is involved Binding: Participation Role Type ( Extensible )
reference	Σ	0..1	Reference ( Device | Group | CareTeam | Organization | Patient | Practitioner | RelatedPerson | PractitionerRole | DeviceDefinition | Group | HealthcareService )	Authorized actor(s)
action	Σ	0..*	CodeableConcept	Actions controlled by this rule Binding: Type Restful Interaction ( Preferred )
purpose	Σ	0..*	CodeableConcept	The purpose for which the permission is given Binding: PurposeOfUse ( Preferred )
limit		0..*	BackboneElement	What limits apply to the use of the data
control	Σ	0..*	CodeableConcept	What coded limits apply to the use of the data Binding: SecurityControlObservationValue ( Preferred )
tag	Σ	0..*	Coding	The sensitivity codes that must be removed from the data Binding: InformationSensitivityPolicy ( Preferred )
element	Σ	0..*	string	What data elements that must be removed from the data
Documentation for this format

See the Extensions for this resource

<Permission xmlns="http://hl7.org/fhir"> 
 <!-- from Resource: id, meta, implicitRules, and language -->
 <!-- from DomainResource: text, contained, extension, and modifierExtension -->
 <identifier><!-- 0..* Identifier Business Identifier for permission --></identifier>
 <status value="[code]"/><!-- 1..1 active | entered-in-error | draft | rejected -->
 <asserter><!-- 0..1 Reference(CareTeam|HealthcareService|Organization|Patient|
   Practitioner|PractitionerRole|RelatedPerson) The person or entity that asserts the permission --></asserter>
 <date value="[dateTime]"/><!-- 0..* The date that permission was asserted -->
 <validity><!-- 0..1 Period The period in which the permission is active --></validity>
 <justification>  <!-- 0..1 The asserted justification for using the data -->
  <basis><!-- 0..* CodeableConcept The regulatory grounds upon which this Permission builds --></basis>
  <evidence><!-- 0..* Reference(Any) Justifing rational --></evidence>
 </justification>
 <combining value="[code]"/><!-- 1..1 deny-overrides | permit-overrides | ordered-deny-overrides | ordered-permit-overrides | deny-unless-permit | permit-unless-deny -->
 <rule>  <!-- 0..* Constraints to the Permission -->
  <</import>
  <
  <

  <import><!-- I 0..1 Reference(Permission) Reference to a Permission --></import>
  <type value="[code]"/><!-- I 0..1 deny | permit -->
  <data>  <!-- I 0..* The selection criteria to identify data that is within scope of this provision -->

   <resource>  <!-- 0..* Explicit FHIR Resource references -->
    <meaning value="[code]"/><!-- 1..1 instance | related | dependents | authoredby -->
    <reference><!-- 1..1 Reference(Any) The actual data reference --></reference>
   </resource>
   <resourceType><!-- 0..* Coding e.g. Resource Type, Profile, etc --></resourceType>

   <security><!-- 0..* Coding Security tag code on .meta.security --></security>
   <period><!-- 0..1 Period Timeframe encompasing data create/update --></period>
   <expression><!-- 0..1 Expression Expression identifying the data --></expression>
  </data>
  <

  <activity>  <!-- I 0..* A description or definition of which activities are allowed to be done on the data -->

   <actor>  <!-- 0..* Who|what is controlled by this rule -->
    <role><!-- 0..1 CodeableConcept How the actor is involved --></role>
    <|

    <reference><!-- 0..1 Reference(CareTeam|Device|DeviceDefinition|Group|

      HealthcareService|Organization|Patient|Practitioner|PractitionerRole|
      RelatedPerson) Authorized actor(s) --></reference>
   </actor>
   <action><!-- 0..* CodeableConcept Actions controlled by this rule --></action>
   <</purpose>

   <purpose><!-- 0..* CodeableConcept The purpose for which the permission is given  --></purpose>

  </activity>
  <limit>  <!-- 0..* What limits apply to the use of the data -->
   <</control>
   <</tag>

   <control><!-- 0..* CodeableConcept What coded limits apply to the use of the data  --></control>
   <tag><!-- 0..* Coding The sensitivity codes that must be removed from the data  --></tag>

   <element value="[string]"/><!-- 0..* What data elements that must be removed from the data -->
  </limit>
 </rule>
</Permission>

{
  "resourceType" : "Permission",
  // from Resource: id, meta, implicitRules, and language
  // from DomainResource: text, contained, extension, and modifierExtension
  "identifier" : [{ Identifier }], // Business Identifier for permission
  "status" : "<code>", // R!  active | entered-in-error | draft | rejected
  "asserter" : { Reference(CareTeam|HealthcareService|Organization|Patient|
   Practitioner|PractitionerRole|RelatedPerson) }, // The person or entity that asserts the permission
  "date" : ["<dateTime>"], // The date that permission was asserted
  "validity" : { Period }, // The period in which the permission is active
  "justification" : { // The asserted justification for using the data
    "basis" : [{ CodeableConcept }], // The regulatory grounds upon which this Permission builds
    "evidence" : [{ Reference(Any) }] // Justifing rational
  },
  "combining" : "<code>", // R!  deny-overrides | permit-overrides | ordered-deny-overrides | ordered-permit-overrides | deny-unless-permit | permit-unless-deny
  "rule" : [{ // Constraints to the Permission
    "
    "
    "

    "import" : { Reference(Permission) }, // I Reference to a Permission
    "type" : "<code>", // I deny | permit
    "data" : [{ // I The selection criteria to identify data that is within scope of this provision

      "resource" : [{ // Explicit FHIR Resource references
        "meaning" : "<code>", // R!  instance | related | dependents | authoredby
        "reference" : { Reference(Any) } // R!  The actual data reference
      }],
      "resourceType" : [{ Coding }], // e.g. Resource Type, Profile, etc

      "security" : [{ Coding }], // Security tag code on .meta.security
      "period" : { Period }, // Timeframe encompasing data create/update
      "expression" : { Expression } // Expression identifying the data
    }],
    "

    "activity" : [{ // I A description or definition of which activities are allowed to be done on the data

      "actor" : [{ // Who|what is controlled by this rule
        "role" : { CodeableConcept }, // How the actor is involved
        "|

        "reference" : { Reference(CareTeam|Device|DeviceDefinition|Group|

      HealthcareService|Organization|Patient|Practitioner|PractitionerRole|
      RelatedPerson) } // Authorized actor(s)
      }],
      "action" : [{ CodeableConcept }], // Actions controlled by this rule
      "

      "purpose" : [{ CodeableConcept }] // The purpose for which the permission is given 

    }],
    "limit" : [{ // What limits apply to the use of the data
      "
      "

      "control" : [{ CodeableConcept }], // What coded limits apply to the use of the data 
      "tag" : [{ Coding }], // The sensitivity codes that must be removed from the data 

      "element" : ["<string>"] // What data elements that must be removed from the data
    }]
  }]
}

@prefix fhir: <http://hl7.org/fhir/> .


[ a fhir:Permission;
  fhir:nodeRole fhir:treeRoot; # if this is the parser root

  # from 
  # from 

  # from Resource: fhir:id, fhir:meta, fhir:implicitRules, and fhir:language
  # from DomainResource: fhir:text, fhir:contained, fhir:extension, and fhir:modifierExtension

  fhir:identifier  ( [ Identifier ] ... ) ; # 0..* Business Identifier for permission
  fhir:status [ code ] ; # 1..1 active | entered-in-error | draft | rejected
  fhir:asserter [ Reference(CareTeam|HealthcareService|Organization|Patient|Practitioner|PractitionerRole|
  RelatedPerson) ] ; # 0..1 The person or entity that asserts the permission
  fhir:date  ( [ dateTime ] ... ) ; # 0..* The date that permission was asserted
  fhir:validity [ Period ] ; # 0..1 The period in which the permission is active
  fhir:justification [ # 0..1 The asserted justification for using the data
    fhir:basis  ( [ CodeableConcept ] ... ) ; # 0..* The regulatory grounds upon which this Permission builds
    fhir:evidence  ( [ Reference(Any) ] ... ) ; # 0..* Justifing rational
  ] ;
  fhir:combining [ code ] ; # 1..1 deny-overrides | permit-overrides | ordered-deny-overrides | ordered-permit-overrides | deny-unless-permit | permit-unless-deny
  fhir:rule ( [ # 0..* Constraints to the Permission
    fhir:
    fhir:
    fhir:

    fhir:import [ Reference(Permission) ] ; # 0..1 I Reference to a Permission
    fhir:type [ code ] ; # 0..1 I deny | permit
    fhir:data ( [ # 0..* I The selection criteria to identify data that is within scope of this provision

      fhir:resource ( [ # 0..* Explicit FHIR Resource references
        fhir:meaning [ code ] ; # 1..1 instance | related | dependents | authoredby
        fhir:reference [ Reference(Any) ] ; # 1..1 The actual data reference
      ] ... ) ;
      fhir:resourceType  ( [ Coding ] ... ) ; # 0..* e.g. Resource Type, Profile, etc

      fhir:security  ( [ Coding ] ... ) ; # 0..* Security tag code on .meta.security
      fhir:period [ Period ] ; # 0..1 Timeframe encompasing data create/update
      fhir:expression [ Expression ] ; # 0..1 Expression identifying the data
    ] ... ) ;
    fhir:

    fhir:activity ( [ # 0..* I A description or definition of which activities are allowed to be done on the data

      fhir:actor ( [ # 0..* Who|what is controlled by this rule
        fhir:role [ CodeableConcept ] ; # 0..1 How the actor is involved
        fhir:|
  

        fhir:reference [ Reference(CareTeam|Device|DeviceDefinition|Group|HealthcareService|Organization|Patient|
  Practitioner|PractitionerRole|RelatedPerson) ] ; # 0..1 Authorized actor(s)
      ] ... ) ;
      fhir:action  ( [ CodeableConcept ] ... ) ; # 0..* Actions controlled by this rule
      fhir:purpose  ( [ CodeableConcept ] ... ) ; # 0..* The purpose for which the permission is given
    ] ... ) ;
    fhir:limit ( [ # 0..* What limits apply to the use of the data
      fhir:control  ( [ CodeableConcept ] ... ) ; # 0..* What coded limits apply to the use of the data
      fhir:tag  ( [ Coding ] ... ) ; # 0..* The sensitivity codes that must be removed from the data
      fhir:element  ( [ string ] ... ) ; # 0..* What data elements that must be removed from the data
    ] ... ) ;
  ] ... ) ;
]

Changes from both R4 and R4B

This resource did not exist in Release R4

See the Full Difference for further information

This analysis is available for R4 as XML or JSON and for R4B as XML or JSON .