SMART Permission Tickets
0.1.0 - ci-build
SMART Permission Tickets, published by . This guide is not an authorized publication; it is the continuous build for version 0.1.0 built by the FHIR (HL7® FHIR® Standard) CI Build. This version is based on the current content of https://github.com/jmandel/smart-permission-tickets-wip/ and changes regularly. See the Directory of published versions
| Official URL: http://smarthealthit.org/ig/permission-tickets/StructureDefinition/PermissionTicket | Version: 0.1.0 | |||
| Draft as of 2026-03-06 | Computable Name: PermissionTicket | |||
Common core of a Permission Ticket. Includes the security envelope, shared authorization claims, and a typed details slot. Business-specific semantics are defined by ticket-type-specific schemas selected by ticket_type.
Usages:
You can also check for usages in the FHIR IG Statistics
Description of Profiles, Differentials, Snapshots and how the different presentations work.
| Name | Flags | Card. | Type | Description & Constraints Filter: ![]() ![]() |
|---|---|---|---|---|
![]() |
0..* | Base | Permission Ticket (JWT Payload) | |
![]() ![]() |
1..1 | string | Issuer (Trusted Issuer URL) | |
![]() ![]() |
1..1 | string | Issuer-defined subject of the authorization grant (profile-specific). This value is issuer-local and SHALL NOT be relied on as a cross-party client identifier. | |
![]() ![]() |
1..* | uri | Audience (recipient URL(s) or network / trust framework identifier) | |
![]() ![]() |
1..1 | integer | Expiration Timestamp | |
![]() ![]() |
0..1 | integer | Issued-At Timestamp | |
![]() ![]() |
0..1 | string | Unique Ticket ID | |
![]() ![]() |
1..1 | uri | Ticket type URI identifying the ticket schema and processing rules | |
![]() ![]() |
0..1 | BackboneElement | Confirmation (RFC 7800). RECOMMENDED. Required by some ticket types (e.g., patient access, authorized representative, research). When present, Data Holders SHALL enforce key binding. | |
![]() ![]() ![]() |
0..1 | string | Unique id for inter-element referencing | |
![]() ![]() ![]() |
0..* | Extension | Additional content defined by implementations Slice: Unordered, Open by value:url | |
![]() ![]() ![]() |
?!Σ | 0..* | Extension | Extensions that cannot be ignored even if unrecognized |
![]() ![]() ![]() |
1..1 | string | JWK Thumbprint (RFC 7638) of the authorized client key | |
![]() ![]() |
0..1 | BackboneElement | Revocation Information | |
![]() ![]() ![]() |
0..1 | string | Unique id for inter-element referencing | |
![]() ![]() ![]() |
0..* | Extension | Additional content defined by implementations Slice: Unordered, Open by value:url | |
![]() ![]() ![]() |
?!Σ | 0..* | Extension | Extensions that cannot be ignored even if unrecognized |
![]() ![]() ![]() |
1..1 | url | URL of the Credential Revocation List (CRL) | |
![]() ![]() ![]() |
1..1 | string | Revocation Identifier (opaque, max 24 chars) | |
![]() ![]() |
1..1 | BackboneElement | Common Authorization Claims | |
![]() ![]() ![]() |
0..1 | string | Unique id for inter-element referencing | |
![]() ![]() ![]() |
0..* | Extension | Additional content defined by implementations Slice: Unordered, Open by value:url | |
![]() ![]() ![]() |
?!Σ | 0..* | Extension | Extensions that cannot be ignored even if unrecognized |
![]() ![]() ![]() |
1..1 | BackboneElement | The Patient or Subject of the data | |
![]() ![]() ![]() ![]() |
0..1 | string | Local resource ID (type=reference) | |
![]() ![]() ![]() ![]() |
0..* | Extension | Additional content defined by implementations Slice: Unordered, Open by value:url | |
![]() ![]() ![]() ![]() |
?!Σ | 0..* | Extension | Extensions that cannot be ignored even if unrecognized |
![]() ![]() ![]() ![]() |
1..1 | code | Subject resolution mode: match | identifier | reference | |
![]() ![]() ![]() ![]() |
0..1 | Patient | Demographic traits for matching (type=match) | |
![]() ![]() ![]() ![]() |
0..1 | string | Resource Type (e.g. Patient) | |
![]() ![]() ![]() ![]() |
0..1 | string | Local resource reference, e.g. Patient/123 (type=reference) | |
![]() ![]() ![]() ![]() |
0..* | Identifier | Business Identifier (type=identifier) | |
![]() ![]() ![]() |
1..1 | BackboneElement | Access Constraints | |
![]() ![]() ![]() ![]() |
0..1 | string | Unique id for inter-element referencing | |
![]() ![]() ![]() ![]() |
0..* | Extension | Additional content defined by implementations Slice: Unordered, Open by value:url | |
![]() ![]() ![]() ![]() |
?!Σ | 0..* | Extension | Extensions that cannot be ignored even if unrecognized |
![]() ![]() ![]() ![]() |
0..* | string | SMART Scopes (e.g. patient/Immunization.rs) | |
![]() ![]() ![]() ![]() |
0..* | Period | Time restrictions (Service Date) | |
![]() ![]() ![]() ![]() |
0..* | Address | Jurisdictional restrictions (state/country granularity) | |
![]() ![]() ![]() ![]() |
0..* | Organization | Source organization restrictions (matching by identifier preferred) | |
![]() ![]() ![]() |
0..1 | BackboneElement | The Requesting Agent (optional) | |
![]() ![]() ![]() ![]() |
0..1 | string | Unique id for inter-element referencing | |
![]() ![]() ![]() ![]() |
0..* | Extension | Additional content defined by implementations Slice: Unordered, Open by value:url | |
![]() ![]() ![]() ![]() |
?!Σ | 0..* | Extension | Extensions that cannot be ignored even if unrecognized |
![]() ![]() ![]() ![]() |
1..1 | string | Type of requester (Practitioner, PractitionerRole, RelatedPerson, Organization) | |
![]() ![]() ![]() ![]() |
0..* | HumanName | Name of the requester | |
![]() ![]() ![]() ![]() |
0..* | ContactPoint | Contact details | |
![]() ![]() ![]() ![]() |
0..* | Identifier | Requester identifiers (NPI, etc) | |
![]() ![]() ![]() ![]() |
0..* | CodeableConcept | Relationship to subject | |
![]() ![]() ![]() ![]() |
0..* | CodeableConcept | Organization type | |
![]() ![]() ![]() ![]() |
0..* | Resource | Embedded resources | |
![]() ![]() |
0..1 | BackboneElement | Ticket-type-specific claims. Schema is defined by the ticket_type URI. Absent when the ticket type has no business-specific fields beyond the common authorization claims. | |
Documentation for this format | ||||
| Id | Grade | Path(s) | Description | Expression |
| ele-1 | error | **ALL** elements | All FHIR elements must have a @value or children |
hasValue() or (children().count() > id.count())
|
| ext-1 | error | **ALL** extensions | Must have either extensions or value[x], not both |
extension.exists() != value.exists()
|
This structure is derived from Base
| Name | Flags | Card. | Type | Description & Constraints Filter: ![]() ![]() |
|---|---|---|---|---|
![]() |
0..* | Base | Permission Ticket (JWT Payload) | |
![]() ![]() |
1..1 | string | Issuer (Trusted Issuer URL) | |
![]() ![]() |
1..1 | string | Issuer-defined subject of the authorization grant (profile-specific). This value is issuer-local and SHALL NOT be relied on as a cross-party client identifier. | |
![]() ![]() |
1..* | uri | Audience (recipient URL(s) or network / trust framework identifier) | |
![]() ![]() |
1..1 | integer | Expiration Timestamp | |
![]() ![]() |
0..1 | integer | Issued-At Timestamp | |
![]() ![]() |
0..1 | string | Unique Ticket ID | |
![]() ![]() |
1..1 | uri | Ticket type URI identifying the ticket schema and processing rules | |
![]() ![]() |
0..1 | BackboneElement | Confirmation (RFC 7800). RECOMMENDED. Required by some ticket types (e.g., patient access, authorized representative, research). When present, Data Holders SHALL enforce key binding. | |
![]() ![]() ![]() |
1..1 | string | JWK Thumbprint (RFC 7638) of the authorized client key | |
![]() ![]() |
0..1 | BackboneElement | Revocation Information | |
![]() ![]() ![]() |
1..1 | url | URL of the Credential Revocation List (CRL) | |
![]() ![]() ![]() |
1..1 | string | Revocation Identifier (opaque, max 24 chars) | |
![]() ![]() |
1..1 | BackboneElement | Common Authorization Claims | |
![]() ![]() ![]() |
1..1 | BackboneElement | The Patient or Subject of the data | |
![]() ![]() ![]() ![]() |
1..1 | code | Subject resolution mode: match | identifier | reference | |
![]() ![]() ![]() ![]() |
0..1 | Patient | Demographic traits for matching (type=match) | |
![]() ![]() ![]() ![]() |
0..1 | string | Resource Type (e.g. Patient) | |
![]() ![]() ![]() ![]() |
0..1 | string | Local resource ID (type=reference) | |
![]() ![]() ![]() ![]() |
0..1 | string | Local resource reference, e.g. Patient/123 (type=reference) | |
![]() ![]() ![]() ![]() |
0..* | Identifier | Business Identifier (type=identifier) | |
![]() ![]() ![]() |
1..1 | BackboneElement | Access Constraints | |
![]() ![]() ![]() ![]() |
0..* | string | SMART Scopes (e.g. patient/Immunization.rs) | |
![]() ![]() ![]() ![]() |
0..* | Period | Time restrictions (Service Date) | |
![]() ![]() ![]() ![]() |
0..* | Address | Jurisdictional restrictions (state/country granularity) | |
![]() ![]() ![]() ![]() |
0..* | Organization | Source organization restrictions (matching by identifier preferred) | |
![]() ![]() ![]() |
0..1 | BackboneElement | The Requesting Agent (optional) | |
![]() ![]() ![]() ![]() |
1..1 | string | Type of requester (Practitioner, PractitionerRole, RelatedPerson, Organization) | |
![]() ![]() ![]() ![]() |
0..* | HumanName | Name of the requester | |
![]() ![]() ![]() ![]() |
0..* | ContactPoint | Contact details | |
![]() ![]() ![]() ![]() |
0..* | Identifier | Requester identifiers (NPI, etc) | |
![]() ![]() ![]() ![]() |
0..* | CodeableConcept | Relationship to subject | |
![]() ![]() ![]() ![]() |
0..* | CodeableConcept | Organization type | |
![]() ![]() ![]() ![]() |
0..* | Resource | Embedded resources | |
![]() ![]() |
0..1 | BackboneElement | Ticket-type-specific claims. Schema is defined by the ticket_type URI. Absent when the ticket type has no business-specific fields beyond the common authorization claims. | |
Documentation for this format | ||||
| Name | Flags | Card. | Type | Description & Constraints Filter: ![]() ![]() |
|---|---|---|---|---|
![]() |
0..* | Base | Permission Ticket (JWT Payload) | |
![]() ![]() |
1..1 | string | Issuer (Trusted Issuer URL) | |
![]() ![]() |
1..1 | string | Issuer-defined subject of the authorization grant (profile-specific). This value is issuer-local and SHALL NOT be relied on as a cross-party client identifier. | |
![]() ![]() |
1..* | uri | Audience (recipient URL(s) or network / trust framework identifier) | |
![]() ![]() |
1..1 | integer | Expiration Timestamp | |
![]() ![]() |
0..1 | integer | Issued-At Timestamp | |
![]() ![]() |
0..1 | string | Unique Ticket ID | |
![]() ![]() |
1..1 | uri | Ticket type URI identifying the ticket schema and processing rules | |
![]() ![]() |
0..1 | BackboneElement | Confirmation (RFC 7800). RECOMMENDED. Required by some ticket types (e.g., patient access, authorized representative, research). When present, Data Holders SHALL enforce key binding. | |
![]() ![]() ![]() |
0..1 | string | Unique id for inter-element referencing | |
![]() ![]() ![]() |
0..* | Extension | Additional content defined by implementations Slice: Unordered, Open by value:url | |
![]() ![]() ![]() |
?!Σ | 0..* | Extension | Extensions that cannot be ignored even if unrecognized |
![]() ![]() ![]() |
1..1 | string | JWK Thumbprint (RFC 7638) of the authorized client key | |
![]() ![]() |
0..1 | BackboneElement | Revocation Information | |
![]() ![]() ![]() |
0..1 | string | Unique id for inter-element referencing | |
![]() ![]() ![]() |
0..* | Extension | Additional content defined by implementations Slice: Unordered, Open by value:url | |
![]() ![]() ![]() |
?!Σ | 0..* | Extension | Extensions that cannot be ignored even if unrecognized |
![]() ![]() ![]() |
1..1 | url | URL of the Credential Revocation List (CRL) | |
![]() ![]() ![]() |
1..1 | string | Revocation Identifier (opaque, max 24 chars) | |
![]() ![]() |
1..1 | BackboneElement | Common Authorization Claims | |
![]() ![]() ![]() |
0..1 | string | Unique id for inter-element referencing | |
![]() ![]() ![]() |
0..* | Extension | Additional content defined by implementations Slice: Unordered, Open by value:url | |
![]() ![]() ![]() |
?!Σ | 0..* | Extension | Extensions that cannot be ignored even if unrecognized |
![]() ![]() ![]() |
1..1 | BackboneElement | The Patient or Subject of the data | |
![]() ![]() ![]() ![]() |
0..1 | string | Local resource ID (type=reference) | |
![]() ![]() ![]() ![]() |
0..* | Extension | Additional content defined by implementations Slice: Unordered, Open by value:url | |
![]() ![]() ![]() ![]() |
?!Σ | 0..* | Extension | Extensions that cannot be ignored even if unrecognized |
![]() ![]() ![]() ![]() |
1..1 | code | Subject resolution mode: match | identifier | reference | |
![]() ![]() ![]() ![]() |
0..1 | Patient | Demographic traits for matching (type=match) | |
![]() ![]() ![]() ![]() |
0..1 | string | Resource Type (e.g. Patient) | |
![]() ![]() ![]() ![]() |
0..1 | string | Local resource reference, e.g. Patient/123 (type=reference) | |
![]() ![]() ![]() ![]() |
0..* | Identifier | Business Identifier (type=identifier) | |
![]() ![]() ![]() |
1..1 | BackboneElement | Access Constraints | |
![]() ![]() ![]() ![]() |
0..1 | string | Unique id for inter-element referencing | |
![]() ![]() ![]() ![]() |
0..* | Extension | Additional content defined by implementations Slice: Unordered, Open by value:url | |
![]() ![]() ![]() ![]() |
?!Σ | 0..* | Extension | Extensions that cannot be ignored even if unrecognized |
![]() ![]() ![]() ![]() |
0..* | string | SMART Scopes (e.g. patient/Immunization.rs) | |
![]() ![]() ![]() ![]() |
0..* | Period | Time restrictions (Service Date) | |
![]() ![]() ![]() ![]() |
0..* | Address | Jurisdictional restrictions (state/country granularity) | |
![]() ![]() ![]() ![]() |
0..* | Organization | Source organization restrictions (matching by identifier preferred) | |
![]() ![]() ![]() |
0..1 | BackboneElement | The Requesting Agent (optional) | |
![]() ![]() ![]() ![]() |
0..1 | string | Unique id for inter-element referencing | |
![]() ![]() ![]() ![]() |
0..* | Extension | Additional content defined by implementations Slice: Unordered, Open by value:url | |
![]() ![]() ![]() ![]() |
?!Σ | 0..* | Extension | Extensions that cannot be ignored even if unrecognized |
![]() ![]() ![]() ![]() |
1..1 | string | Type of requester (Practitioner, PractitionerRole, RelatedPerson, Organization) | |
![]() ![]() ![]() ![]() |
0..* | HumanName | Name of the requester | |
![]() ![]() ![]() ![]() |
0..* | ContactPoint | Contact details | |
![]() ![]() ![]() ![]() |
0..* | Identifier | Requester identifiers (NPI, etc) | |
![]() ![]() ![]() ![]() |
0..* | CodeableConcept | Relationship to subject | |
![]() ![]() ![]() ![]() |
0..* | CodeableConcept | Organization type | |
![]() ![]() ![]() ![]() |
0..* | Resource | Embedded resources | |
![]() ![]() |
0..1 | BackboneElement | Ticket-type-specific claims. Schema is defined by the ticket_type URI. Absent when the ticket type has no business-specific fields beyond the common authorization claims. | |
Documentation for this format | ||||
| Id | Grade | Path(s) | Description | Expression |
| ele-1 | error | **ALL** elements | All FHIR elements must have a @value or children |
hasValue() or (children().count() > id.count())
|
| ext-1 | error | **ALL** extensions | Must have either extensions or value[x], not both |
extension.exists() != value.exists()
|
This structure is derived from Base
Key Elements View
| Name | Flags | Card. | Type | Description & Constraints Filter: ![]() ![]() |
|---|---|---|---|---|
![]() |
0..* | Base | Permission Ticket (JWT Payload) | |
![]() ![]() |
1..1 | string | Issuer (Trusted Issuer URL) | |
![]() ![]() |
1..1 | string | Issuer-defined subject of the authorization grant (profile-specific). This value is issuer-local and SHALL NOT be relied on as a cross-party client identifier. | |
![]() ![]() |
1..* | uri | Audience (recipient URL(s) or network / trust framework identifier) | |
![]() ![]() |
1..1 | integer | Expiration Timestamp | |
![]() ![]() |
0..1 | integer | Issued-At Timestamp | |
![]() ![]() |
0..1 | string | Unique Ticket ID | |
![]() ![]() |
1..1 | uri | Ticket type URI identifying the ticket schema and processing rules | |
![]() ![]() |
0..1 | BackboneElement | Confirmation (RFC 7800). RECOMMENDED. Required by some ticket types (e.g., patient access, authorized representative, research). When present, Data Holders SHALL enforce key binding. | |
![]() ![]() ![]() |
0..1 | string | Unique id for inter-element referencing | |
![]() ![]() ![]() |
0..* | Extension | Additional content defined by implementations Slice: Unordered, Open by value:url | |
![]() ![]() ![]() |
?!Σ | 0..* | Extension | Extensions that cannot be ignored even if unrecognized |
![]() ![]() ![]() |
1..1 | string | JWK Thumbprint (RFC 7638) of the authorized client key | |
![]() ![]() |
0..1 | BackboneElement | Revocation Information | |
![]() ![]() ![]() |
0..1 | string | Unique id for inter-element referencing | |
![]() ![]() ![]() |
0..* | Extension | Additional content defined by implementations Slice: Unordered, Open by value:url | |
![]() ![]() ![]() |
?!Σ | 0..* | Extension | Extensions that cannot be ignored even if unrecognized |
![]() ![]() ![]() |
1..1 | url | URL of the Credential Revocation List (CRL) | |
![]() ![]() ![]() |
1..1 | string | Revocation Identifier (opaque, max 24 chars) | |
![]() ![]() |
1..1 | BackboneElement | Common Authorization Claims | |
![]() ![]() ![]() |
0..1 | string | Unique id for inter-element referencing | |
![]() ![]() ![]() |
0..* | Extension | Additional content defined by implementations Slice: Unordered, Open by value:url | |
![]() ![]() ![]() |
?!Σ | 0..* | Extension | Extensions that cannot be ignored even if unrecognized |
![]() ![]() ![]() |
1..1 | BackboneElement | The Patient or Subject of the data | |
![]() ![]() ![]() ![]() |
0..1 | string | Local resource ID (type=reference) | |
![]() ![]() ![]() ![]() |
0..* | Extension | Additional content defined by implementations Slice: Unordered, Open by value:url | |
![]() ![]() ![]() ![]() |
?!Σ | 0..* | Extension | Extensions that cannot be ignored even if unrecognized |
![]() ![]() ![]() ![]() |
1..1 | code | Subject resolution mode: match | identifier | reference | |
![]() ![]() ![]() ![]() |
0..1 | Patient | Demographic traits for matching (type=match) | |
![]() ![]() ![]() ![]() |
0..1 | string | Resource Type (e.g. Patient) | |
![]() ![]() ![]() ![]() |
0..1 | string | Local resource reference, e.g. Patient/123 (type=reference) | |
![]() ![]() ![]() ![]() |
0..* | Identifier | Business Identifier (type=identifier) | |
![]() ![]() ![]() |
1..1 | BackboneElement | Access Constraints | |
![]() ![]() ![]() ![]() |
0..1 | string | Unique id for inter-element referencing | |
![]() ![]() ![]() ![]() |
0..* | Extension | Additional content defined by implementations Slice: Unordered, Open by value:url | |
![]() ![]() ![]() ![]() |
?!Σ | 0..* | Extension | Extensions that cannot be ignored even if unrecognized |
![]() ![]() ![]() ![]() |
0..* | string | SMART Scopes (e.g. patient/Immunization.rs) | |
![]() ![]() ![]() ![]() |
0..* | Period | Time restrictions (Service Date) | |
![]() ![]() ![]() ![]() |
0..* | Address | Jurisdictional restrictions (state/country granularity) | |
![]() ![]() ![]() ![]() |
0..* | Organization | Source organization restrictions (matching by identifier preferred) | |
![]() ![]() ![]() |
0..1 | BackboneElement | The Requesting Agent (optional) | |
![]() ![]() ![]() ![]() |
0..1 | string | Unique id for inter-element referencing | |
![]() ![]() ![]() ![]() |
0..* | Extension | Additional content defined by implementations Slice: Unordered, Open by value:url | |
![]() ![]() ![]() ![]() |
?!Σ | 0..* | Extension | Extensions that cannot be ignored even if unrecognized |
![]() ![]() ![]() ![]() |
1..1 | string | Type of requester (Practitioner, PractitionerRole, RelatedPerson, Organization) | |
![]() ![]() ![]() ![]() |
0..* | HumanName | Name of the requester | |
![]() ![]() ![]() ![]() |
0..* | ContactPoint | Contact details | |
![]() ![]() ![]() ![]() |
0..* | Identifier | Requester identifiers (NPI, etc) | |
![]() ![]() ![]() ![]() |
0..* | CodeableConcept | Relationship to subject | |
![]() ![]() ![]() ![]() |
0..* | CodeableConcept | Organization type | |
![]() ![]() ![]() ![]() |
0..* | Resource | Embedded resources | |
![]() ![]() |
0..1 | BackboneElement | Ticket-type-specific claims. Schema is defined by the ticket_type URI. Absent when the ticket type has no business-specific fields beyond the common authorization claims. | |
Documentation for this format | ||||
| Id | Grade | Path(s) | Description | Expression |
| ele-1 | error | **ALL** elements | All FHIR elements must have a @value or children |
hasValue() or (children().count() > id.count())
|
| ext-1 | error | **ALL** extensions | Must have either extensions or value[x], not both |
extension.exists() != value.exists()
|
Differential View
This structure is derived from Base
| Name | Flags | Card. | Type | Description & Constraints Filter: ![]() ![]() |
|---|---|---|---|---|
![]() |
0..* | Base | Permission Ticket (JWT Payload) | |
![]() ![]() |
1..1 | string | Issuer (Trusted Issuer URL) | |
![]() ![]() |
1..1 | string | Issuer-defined subject of the authorization grant (profile-specific). This value is issuer-local and SHALL NOT be relied on as a cross-party client identifier. | |
![]() ![]() |
1..* | uri | Audience (recipient URL(s) or network / trust framework identifier) | |
![]() ![]() |
1..1 | integer | Expiration Timestamp | |
![]() ![]() |
0..1 | integer | Issued-At Timestamp | |
![]() ![]() |
0..1 | string | Unique Ticket ID | |
![]() ![]() |
1..1 | uri | Ticket type URI identifying the ticket schema and processing rules | |
![]() ![]() |
0..1 | BackboneElement | Confirmation (RFC 7800). RECOMMENDED. Required by some ticket types (e.g., patient access, authorized representative, research). When present, Data Holders SHALL enforce key binding. | |
![]() ![]() ![]() |
1..1 | string | JWK Thumbprint (RFC 7638) of the authorized client key | |
![]() ![]() |
0..1 | BackboneElement | Revocation Information | |
![]() ![]() ![]() |
1..1 | url | URL of the Credential Revocation List (CRL) | |
![]() ![]() ![]() |
1..1 | string | Revocation Identifier (opaque, max 24 chars) | |
![]() ![]() |
1..1 | BackboneElement | Common Authorization Claims | |
![]() ![]() ![]() |
1..1 | BackboneElement | The Patient or Subject of the data | |
![]() ![]() ![]() ![]() |
1..1 | code | Subject resolution mode: match | identifier | reference | |
![]() ![]() ![]() ![]() |
0..1 | Patient | Demographic traits for matching (type=match) | |
![]() ![]() ![]() ![]() |
0..1 | string | Resource Type (e.g. Patient) | |
![]() ![]() ![]() ![]() |
0..1 | string | Local resource ID (type=reference) | |
![]() ![]() ![]() ![]() |
0..1 | string | Local resource reference, e.g. Patient/123 (type=reference) | |
![]() ![]() ![]() ![]() |
0..* | Identifier | Business Identifier (type=identifier) | |
![]() ![]() ![]() |
1..1 | BackboneElement | Access Constraints | |
![]() ![]() ![]() ![]() |
0..* | string | SMART Scopes (e.g. patient/Immunization.rs) | |
![]() ![]() ![]() ![]() |
0..* | Period | Time restrictions (Service Date) | |
![]() ![]() ![]() ![]() |
0..* | Address | Jurisdictional restrictions (state/country granularity) | |
![]() ![]() ![]() ![]() |
0..* | Organization | Source organization restrictions (matching by identifier preferred) | |
![]() ![]() ![]() |
0..1 | BackboneElement | The Requesting Agent (optional) | |
![]() ![]() ![]() ![]() |
1..1 | string | Type of requester (Practitioner, PractitionerRole, RelatedPerson, Organization) | |
![]() ![]() ![]() ![]() |
0..* | HumanName | Name of the requester | |
![]() ![]() ![]() ![]() |
0..* | ContactPoint | Contact details | |
![]() ![]() ![]() ![]() |
0..* | Identifier | Requester identifiers (NPI, etc) | |
![]() ![]() ![]() ![]() |
0..* | CodeableConcept | Relationship to subject | |
![]() ![]() ![]() ![]() |
0..* | CodeableConcept | Organization type | |
![]() ![]() ![]() ![]() |
0..* | Resource | Embedded resources | |
![]() ![]() |
0..1 | BackboneElement | Ticket-type-specific claims. Schema is defined by the ticket_type URI. Absent when the ticket type has no business-specific fields beyond the common authorization claims. | |
Documentation for this format | ||||
Snapshot View
| Name | Flags | Card. | Type | Description & Constraints Filter: ![]() ![]() |
|---|---|---|---|---|
![]() |
0..* | Base | Permission Ticket (JWT Payload) | |
![]() ![]() |
1..1 | string | Issuer (Trusted Issuer URL) | |
![]() ![]() |
1..1 | string | Issuer-defined subject of the authorization grant (profile-specific). This value is issuer-local and SHALL NOT be relied on as a cross-party client identifier. | |
![]() ![]() |
1..* | uri | Audience (recipient URL(s) or network / trust framework identifier) | |
![]() ![]() |
1..1 | integer | Expiration Timestamp | |
![]() ![]() |
0..1 | integer | Issued-At Timestamp | |
![]() ![]() |
0..1 | string | Unique Ticket ID | |
![]() ![]() |
1..1 | uri | Ticket type URI identifying the ticket schema and processing rules | |
![]() ![]() |
0..1 | BackboneElement | Confirmation (RFC 7800). RECOMMENDED. Required by some ticket types (e.g., patient access, authorized representative, research). When present, Data Holders SHALL enforce key binding. | |
![]() ![]() ![]() |
0..1 | string | Unique id for inter-element referencing | |
![]() ![]() ![]() |
0..* | Extension | Additional content defined by implementations Slice: Unordered, Open by value:url | |
![]() ![]() ![]() |
?!Σ | 0..* | Extension | Extensions that cannot be ignored even if unrecognized |
![]() ![]() ![]() |
1..1 | string | JWK Thumbprint (RFC 7638) of the authorized client key | |
![]() ![]() |
0..1 | BackboneElement | Revocation Information | |
![]() ![]() ![]() |
0..1 | string | Unique id for inter-element referencing | |
![]() ![]() ![]() |
0..* | Extension | Additional content defined by implementations Slice: Unordered, Open by value:url | |
![]() ![]() ![]() |
?!Σ | 0..* | Extension | Extensions that cannot be ignored even if unrecognized |
![]() ![]() ![]() |
1..1 | url | URL of the Credential Revocation List (CRL) | |
![]() ![]() ![]() |
1..1 | string | Revocation Identifier (opaque, max 24 chars) | |
![]() ![]() |
1..1 | BackboneElement | Common Authorization Claims | |
![]() ![]() ![]() |
0..1 | string | Unique id for inter-element referencing | |
![]() ![]() ![]() |
0..* | Extension | Additional content defined by implementations Slice: Unordered, Open by value:url | |
![]() ![]() ![]() |
?!Σ | 0..* | Extension | Extensions that cannot be ignored even if unrecognized |
![]() ![]() ![]() |
1..1 | BackboneElement | The Patient or Subject of the data | |
![]() ![]() ![]() ![]() |
0..1 | string | Local resource ID (type=reference) | |
![]() ![]() ![]() ![]() |
0..* | Extension | Additional content defined by implementations Slice: Unordered, Open by value:url | |
![]() ![]() ![]() ![]() |
?!Σ | 0..* | Extension | Extensions that cannot be ignored even if unrecognized |
![]() ![]() ![]() ![]() |
1..1 | code | Subject resolution mode: match | identifier | reference | |
![]() ![]() ![]() ![]() |
0..1 | Patient | Demographic traits for matching (type=match) | |
![]() ![]() ![]() ![]() |
0..1 | string | Resource Type (e.g. Patient) | |
![]() ![]() ![]() ![]() |
0..1 | string | Local resource reference, e.g. Patient/123 (type=reference) | |
![]() ![]() ![]() ![]() |
0..* | Identifier | Business Identifier (type=identifier) | |
![]() ![]() ![]() |
1..1 | BackboneElement | Access Constraints | |
![]() ![]() ![]() ![]() |
0..1 | string | Unique id for inter-element referencing | |
![]() ![]() ![]() ![]() |
0..* | Extension | Additional content defined by implementations Slice: Unordered, Open by value:url | |
![]() ![]() ![]() ![]() |
?!Σ | 0..* | Extension | Extensions that cannot be ignored even if unrecognized |
![]() ![]() ![]() ![]() |
0..* | string | SMART Scopes (e.g. patient/Immunization.rs) | |
![]() ![]() ![]() ![]() |
0..* | Period | Time restrictions (Service Date) | |
![]() ![]() ![]() ![]() |
0..* | Address | Jurisdictional restrictions (state/country granularity) | |
![]() ![]() ![]() ![]() |
0..* | Organization | Source organization restrictions (matching by identifier preferred) | |
![]() ![]() ![]() |
0..1 | BackboneElement | The Requesting Agent (optional) | |
![]() ![]() ![]() ![]() |
0..1 | string | Unique id for inter-element referencing | |
![]() ![]() ![]() ![]() |
0..* | Extension | Additional content defined by implementations Slice: Unordered, Open by value:url | |
![]() ![]() ![]() ![]() |
?!Σ | 0..* | Extension | Extensions that cannot be ignored even if unrecognized |
![]() ![]() ![]() ![]() |
1..1 | string | Type of requester (Practitioner, PractitionerRole, RelatedPerson, Organization) | |
![]() ![]() ![]() ![]() |
0..* | HumanName | Name of the requester | |
![]() ![]() ![]() ![]() |
0..* | ContactPoint | Contact details | |
![]() ![]() ![]() ![]() |
0..* | Identifier | Requester identifiers (NPI, etc) | |
![]() ![]() ![]() ![]() |
0..* | CodeableConcept | Relationship to subject | |
![]() ![]() ![]() ![]() |
0..* | CodeableConcept | Organization type | |
![]() ![]() ![]() ![]() |
0..* | Resource | Embedded resources | |
![]() ![]() |
0..1 | BackboneElement | Ticket-type-specific claims. Schema is defined by the ticket_type URI. Absent when the ticket type has no business-specific fields beyond the common authorization claims. | |
Documentation for this format | ||||
| Id | Grade | Path(s) | Description | Expression |
| ele-1 | error | **ALL** elements | All FHIR elements must have a @value or children |
hasValue() or (children().count() > id.count())
|
| ext-1 | error | **ALL** extensions | Must have either extensions or value[x], not both |
extension.exists() != value.exists()
|
This structure is derived from Base