OZO FHIR implementation guide
0.6.3 - ci-build
OZO FHIR implementation guide - Local Development build (v0.6.3) built by the FHIR (HL7® FHIR® Standard) Build Tools. See the Directory of published versions
| Official URL: http://ozoverbindzorg.nl/fhir/CapabilityStatement/OZO-Client | Version: 0.6.3 | |||
| Active as of 2026-03-27 | Computable Name: OZOClientCapabilityStatement | |||
Authenticated client access to the OZO FHIR API for Practitioner, RelatedPerson, and Patient roles. All three roles share the same interactions — the AAA proxy transparently scopes access by rewriting search queries based on the caller's credentials and CareTeam memberships. Write operations validate that the sender/requester is the authenticated user.
Raw OpenAPI-Swagger Definition file | Download
json, xmlNote to Implementers: FHIR Capabilities
Any FHIR capability may be 'allowed' by the system unless explicitly marked as 'SHALL NOT'. A few items are marked as MAY in the Implementation Guide to highlight their potential relevance to the use case.
serverClient access for Practitioner, RelatedPerson, and Patient roles. The AAA proxy automatically filters all search results based on the caller's identity and CareTeam memberships. Write operations validate that the sender/requester is the authenticated user. See the CapabilityStatements documentation page for per-role scoping details.
The summary table lists the resources that are part of this configuration, and for each resource it lists:
_include_revincluderead, search-type.Proxy auto-scopes to patients within the caller's CareTeam context.
read, search-type.Proxy auto-scopes to practitioners within the caller's CareTeam context.
read, search-type.Proxy auto-scopes to related persons within the caller's CareTeam context.
read, search-type.Proxy auto-scopes to CareTeams where the caller is a participant or subject.
read, search-type, create.Threads where the caller or their CareTeam is a recipient. Create requires requester = authenticated user.
read, search-type, create.Messages in threads accessible to the caller. Create requires sender = authenticated user.
read, search-type.Tasks owned by or assigned to the caller. Used as read/unread indicator.
read, search-type, create.Audit events within the caller's access scope. Create requires agent[requestor=true].who = authenticated user.
read, search-type, create, update.Subscriptions with criteria automatically rewritten by the proxy to scope to the caller's access. Uses notify-then-pull pattern (empty payload).