PermissionPolicyIdentifiers Fields

Unrestricted access to the audit repository

Access administrative function on the SanteDB Client

Activate match configuration

Access to administrative applet information

Administer the concept dictionary

Administer data warehouse

Unrestricted access to modify clinical protocol definitions

Policy identifier for allowing of creating new identities

Policy identifier for allowing of creating new identities

Un-restricted match configurations

Allows an identity to alter a policy

Policy identifier for allowance of altering passwords

Policy identifier for allowing for the editing of an identity's security

Unrestricted system configuration

Permission to assign a certificate to an entity

Allows identity to alter administrative object policy

Policy identifier for allowance of changing passwords

Unrestricted backups

Policy identifier for allowing of creating new applications

Policy identifier for allowing of creating new devices

Policy identifier for allowing of creating new identities

Policy identifier for allowing of creating new identities

Create Public backups

Allow principals to create new subscriptions

Whether the user can create roles

Delete clinical data

Delete clinical protocol configurations

delete alll materials

delete alll facilities

Allow principals to delete pubsub subs

Allow a user to write data to the warehouse

Indicates the user can elevate themselves (Break the glass)

Allow principals to enable pubsub

Allows the exporting of clinical data

Permission to sign and issue certificates

Policy identifier for allowance of login

Login to an interactive session (with user interaction)

Allow users to impersonate or use their device credentials

Login for the purposes of password change only

Unrestricted backups

Manage all dispatcher / persistent queues

Manage foreign data

Manage mail

Override policy permission

Query clinical data

Query materials

Query facilities

Allow a user to write data to the warehouse

Read clinical data

Read materials

Indicates the user can read metadata

Read facilities

Allow principals to read pubsub subs

Allow a user to write data to the warehouse

Permission to revoke certificates

Security elevations serve as a special block whereby a user must re-enter their password to perform something

Access administrative function

Access administrative function

Unrestricted certificate management

Access clinical data permission

Unrestricted access to modify clinical protocol definitions

Un-restricted match configurations

Indicates the user can update metadata

Unresitrected pub/sub

Allow a user all access to the warehouse

Write clinical data

Write all materials

Write all facilities

Allow a user to write data to the warehouse