The product determines what each authenticated user may access and do, so that access to sensitive data and functions is limited to what the HDO's tasks and the intended use require, preserving confidentiality, integrity and availability and keeping within permitted uses; personnel given authorisation hold appropriate qualifications, access level and defined responsibilities. Health software typically provides role-based access control aligned to the user's roles in the HDO, letting users perform their assigned tasks, placing quality assurance of the role model with people skilled in both informatics and security, and allowing service staff the access their maintenance and problem investigation need; authorisation can be administered locally or across the enterprise through a central directory. Where high-throughput use leaves no time for logging on and off, local policy can permit reduced controls if physical access is adequately restricted.
The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.