Permissions Catalog: Recommendations for Reuse

The current Permissions Catalog for Role-Based Access Control specifies a set of normative permissions that specify operations that may be applied to a variety of object types.

The permission catalog is a normative specification and it is available for download.

• The most recently published permission catalog is 20071112 HL7 RBAC Healthcare Permission Catalog v3 37.pdf.

The operations refer to the ability to append, create, read, update, delete, and execute specific "objects" identified in the RBAC standards. The "objects specify:

Permission
Operation	Object	Effect
append	Administrative Ad-hoc Report	A role that has this permission, allows the user that logs in with that role to append information to an existing ad-hoc administrative report.

Healthcare Operations

• create
• revise
• activate
• complete
• suspend
• resume
• abort
• hold
• release
• cancel
• obsolete
• nullify

Concept Domains