Identifiers Type
This feature allows access to identifiers of a person, an organization, a provider or a policy to be restricted. The identifiers can only be accessed by users with a role that includes the restriction. The identifier types can be of various types such as the social security number, drivers license number etc.
When a user views a person, organization, provider or policy with the identifiers that they are not allowed to see, the identifiers will be concealed.
When a user searches for the protected identifiers that they are not allowed to see, the identifier will not be returned at all.
- Example
-
User Bob is granted access restriction SECRET_IDENTIFIER. No access restrictions have been granted to user Pete. The following table shows which contact details they can access.
Person Identifier Identifier Type Identifier Access Restriction Accessible by Bob? Accessible by Pete? Mary
123-456-789
Social Security Number
SECRET_IDENTIFIER
yes
no
Jane
289-68c-180D
Pan Card Number
empty
yes
yes
Susan
**-****-890E
Driver’s License Number
TOP_SECRET_IDENTIFIER
no
no
- Inference Prevention
-
When searching on an object with a restricted identifier as search criterion, the object is not returned when the user doesn’t have the appropriate access restrictions for that identifier type.
- Related Entities
-
Not applicable.