Fine grain access in Azure API for FHIR

Ken Miller 6

Need the ability to implement fine grain access in Azure API for FHIR. With Azure Active Directory RBAC, there are currently only 4 roles applied globally to FHIR Resources. FHIR Data Reader, FHIR Data Writer, FHIR Data Exporter and FHIR Data Contributor. In November 2018, I saw Michael Hansen had talked about Fine grain access at the resource type level and below, that was on the roadmap. When would this be available on Azure API for FHIR?

Anurag Sharma 17,571 Reputation points

2020-09-14T10:20:11.517+00:00

Hi @Ken Miller , thanks for reaching out to us. We have reached out to the internal groups to enquire about this feature and shall be back at the earliest we hear from them.

Also is it possible for you to post details where-in Michael discussed the same? This would help us in letting the internal group know about exact context too.
Ken Miller 6 Reputation points

2020-09-14T13:28:53.637+00:00

Here are the locations that I found it. In the roadmap, https://github.com/Microsoft/fhir-server/pull/179/files#diff-4fe9cc97e04ff7c9e22fab242ab3d065 , and also here https://github.com/Microsoft/fhir-server/issues/213 in Michael's comment towards the bottom. "The settings are currently global on the API. There is also a link to how we plan on implementing a much more granular system (resource level and below), but it has not been implemented yet. If you need features like that immediately, you could add Azure API Management in front and implement policies"
Waghmare, Vaibhav E 0 Reputation points

2023-08-23T09:09:27.4566667+00:00

@anurag sharma What's the current state of Fine Grained Access Control for Azure API for FHIR ?

1 answer

Anurag Sharma 17,571 Reputation points

2020-09-15T11:28:14.643+00:00

Hi @Ken Miller , thanks for you patience. As per the latest information from the product group, they have started design on this but there are other priority items in the roadmap which are scheduled for early development that this.

Apologies for the inconvenience.

We will keep you posted on this as and when we hear more from the development perspective.
Please sign in to rate this answer.
Ken Miller 6 Reputation points

2020-09-15T15:46:34.017+00:00

Ok. so there isn't a timeline yet.

Ken Miller 6 Reputation points

2020-09-15T16:35:06.8+00:00

If this is still a few years away, Michael states that you can implement this using Azure API Management in front and implementing policies directed at fhir resources only? Is there an example of how to do this?

Anurag Sharma 17,571 Reputation points

2020-09-16T10:55:16.057+00:00

Hi @Ken Miller , unfortunately there is no sample or example available to do this as of now. We might need to implement the policies through the Azure API management as of now ourselves. However, I am going to escalate the same to the product team, so they can help in creating few sample if possible and update the documentation to help. Once we have these updates, we can come back to the thread and update accordingly. We apologize for the inconvenience.

Ken Miller 6 Reputation points

2020-12-04T17:51:31.653+00:00

Any information yet?
Sign in to comment