Visibility & consent
What it does
This area governs which people and patient records a user can discover and act on — beyond job-based roles. The platform combines tenant/facility session, geographic scopes, visibility, consent, and access grants. That is how sensitive information stays limited to those who should see it.
Where to find it
Much of this lives on a person's own record under People (/people/[personId]):
- Visibility —
/people/[personId]/visibility - Consents —
/people/[personId]/consents - Access grants —
/people/[personId]/access-grants
Related identity documents: Health cards (/identity-access/health-cards).
📸 Screenshot: identity / health cards area (
identity-visibility).
Common tasks
Issue a health card
Open Health cards, choose Issue, enter the card number, and pick a card type from the fixed list (Physical, Virtual, or NFC). Free-text types are not accepted.
Understand why a patient does or doesn’t appear
After registration, a patient may exist in the database but still be undiscoverable to another user until visibility, consent, and scope rules allow it. Search results legitimately differ from person to person.
See who can access a person's record
Open the person → Visibility / Access grants to review who can see them and why.
Record a consent
Open Consents and add a consent. Choose a consent type from the fixed list (Data sharing, Research, Treatment, or Other), set the period, and save. The platform honors it when deciding what others can see.
Grant specific access
Use Access grants to allow a particular user or team to see a record they wouldn’t otherwise — useful for referrals or shared care. Grants can be time-limited.
Clinical write access
Reading a summary and writing clinical data (visits, observations, ADT) both require the right role and a successful patient-access decision. If charting is blocked after registration, check visibility, consent, and grants — not only the user’s roles under Users, roles & permissions.
Emergency (break-glass) access
Where available, emergency access requires a reason and is always recorded for later review under emergency / audit workflows.
Tips & limitations
- These rules combine with roles & permissions: a user must pass both the role check and the visibility/consent/scope check.
- Your signed-in tenant and facility also bound every request — you cannot “reach around” with headers or payload fields.
- Staff home department/unit (from workforce engagement) can further limit which forms appear for a user.
- Global patient search across tenants (when offered) is an operator capability and may be restricted until that feature is enabled for your deployment.
When something looks wrong
| What you see | What it usually is |
|---|---|
| A registered person cannot sign in | Registration does not create a login — the account is a separate step |
| An account exists but reaches nothing | An account without roles can do almost nothing |
| Two records for the same human | They were registered twice instead of linked by existing person id |
For the causes common to every screen — a missing menu item, an empty list, a refusal — see Why a screen will not work.