Boundaries¶
Overview¶
Providers operate within clearly defined clinical boundaries.
Although providers interact with patients and appointments, their access is restricted to resources assigned to them.
Tenant Boundary¶
flowchart LR
PROVIDER["Provider"]
OWN["Assigned Tenant"]
OTHER["Other Tenant"]
PROVIDER --> OWN
PROVIDER -. Access Denied .-> OTHERProviders may only operate within their assigned tenant.
Provider Boundary¶
flowchart LR
PROVIDER_A["Provider A"]
PROVIDER_B["Provider B"]
PROVIDER_A -->|"Own Schedule"| PROVIDER_A
PROVIDER_A -. Access Denied .-> PROVIDER_BProviders cannot manage or modify another provider's schedules, appointments, or consultations.
Patient Boundary¶
Providers may access patient information only when required to deliver care.
flowchart LR
PROVIDER["Provider"]
ASSIGNED["Assigned Patient"]
UNRELATED["Unrelated Patient"]
PROVIDER --> ASSIGNED
PROVIDER -. Access Denied .-> UNRELATEDPatient access must always be associated with a valid clinical relationship.
Administrative Boundary¶
flowchart LR
PROVIDER["Provider"]
ADMIN["Tenant Administration"]
PLATFORM["Platform Administration"]
PROVIDER -. Access Denied .-> ADMIN
PROVIDER -. Access Denied .-> PLATFORMProviders cannot perform administrative operations.
Schedule Boundary¶
flowchart TB
PROVIDER["Provider"]
OWN_SCHEDULE["Own Schedule"]
OTHER_SCHEDULE["Other Provider Schedule"]
PROVIDER --> OWN_SCHEDULE
PROVIDER -. Access Denied .-> OTHER_SCHEDULEAvailability management is limited to schedules owned by the provider.
Separation of Responsibilities¶
flowchart TB
SUPER["Super Administrator"]
ADMIN["Tenant Administrator"]
PROVIDER["Provider"]
PATIENT["Patient"]
SUPER -->|"Platform Governance"| SUPER
ADMIN -->|"Organization Management"| ADMIN
PROVIDER -->|"Clinical Operations"| PROVIDER
PATIENT -->|"Healthcare Participation"| PATIENTProviders focus exclusively on healthcare delivery and consultation-related activities.
Architectural Principles¶
The Provider role follows:
Clinical Ownership¶
Providers are responsible for delivering healthcare services.
Resource Ownership¶
Providers access only resources assigned to them.
Tenant Isolation¶
All activities remain within the provider's assigned tenant.
Minimum Necessary Access¶
Access to patient information is limited to what is necessary to perform clinical responsibilities.
These boundaries ensure secure, compliant, and predictable healthcare operations.