ISO 22600 specifies a Role as a "set of competencies and/or performances which is associated with a task". A Security Role defines a named group of policies (authorization, obligation, delegation and refrain policies) that can be managed, assigned, and revoked together for convenience of use rather than managing these policies individually. For example, at a given organization, all nurses (functional role) may have the same privileges and responsibilities conveyed through six policies. A nurse acting as the charge nurse (a structural role) may then have additional privileges based on two other policies. This class is used to enumerate the policies associated to the nurse role and the charge nurse role.

Attributes
String	authorityIdentifierName	This attribute is defined by ISO 22600-2 as String.
String	description	This attribute is defined by ISO 22600-2 as CodedSimpleValue.
«CS» Code	name	This attribute is defined by ISO 22600-2 as CodedSimpleValue.
«II» Id	objectIdentifier	This is the role_identifier_ID property in the Security DAM. The definition of that property is "This attribute is defined by ISO 22600-2 as ISO ObjectIdentifier." WE RENAMED THIS. WAS THIS OK TO DO????
Permission	permission
Policy	policy	Pointer to a set of policies that define the privileges and responsibilities of the owning Security Role.
«II» Id	roleIdentifier	This is the role_identifier property in the security DAM, and is defined by ISO 22600-2 as a Set of InstanceIndentifiers.

 authorityIdentifierName

Public String authorityIdentifierName

This attribute is defined by ISO 22600-2 as String.

Constraints:

Properties:

Aggregation	None
Alias
Association
Association End
Class	SecurityRole
Datatype
Default
Default Value
Is Composite	false
Is Derived	false
Is Derived Union	false
Is Leaf	false
Is Ordered	false
Is Read Only	false
Is Static	false
Is Unique	true
Keywords
Lower	0
Lower Value	(0)
Multiplicity	0..1
Name	authorityIdentifierName
Name Expression
Namespace	SecurityRole
Opposite
Owner	SecurityRole
Owning Association
Owning Template Parameter
Qualified Name	FHIM::SecurityAndPrivacy::SecurityRole::authorityIdentifierName
Stereotype
Template Parameter
Type	String
Upper	1
Upper Value	(1)
Visibility	Public

 description

Public String description

This attribute is defined by ISO 22600-2 as CodedSimpleValue.

Constraints:

Properties:

Aggregation	None
Alias
Association
Association End
Class	SecurityRole
Datatype
Default
Default Value
Is Composite	false
Is Derived	false
Is Derived Union	false
Is Leaf	false
Is Ordered	false
Is Read Only	false
Is Static	false
Is Unique	true
Keywords
Lower	0
Lower Value	(0)
Multiplicity	0..1
Name	description
Name Expression
Namespace	SecurityRole
Opposite
Owner	SecurityRole
Owning Association
Owning Template Parameter
Qualified Name	FHIM::SecurityAndPrivacy::SecurityRole::description
Stereotype
Template Parameter
Type	String
Upper	1
Upper Value	(1)
Visibility	Public

 name

Public «CS» Code name

This attribute is defined by ISO 22600-2 as CodedSimpleValue.

Constraints:

Properties:

Aggregation	None
Alias
Association
Association End
Class	SecurityRole
Datatype
Default
Default Value
Is Composite	false
Is Derived	false
Is Derived Union	false
Is Leaf	false
Is Ordered	false
Is Read Only	false
Is Static	false
Is Unique	true
Keywords
Lower	0
Lower Value	(0)
Multiplicity	0..1
Name	name
Name Expression
Namespace	SecurityRole
Opposite
Owner	SecurityRole
Owning Association
Owning Template Parameter
Qualified Name	FHIM::SecurityAndPrivacy::SecurityRole::name
Stereotype
Template Parameter
Type	«CS» Code
Upper	1
Upper Value	(1)
Visibility	Public

 objectIdentifier

Public «II» Id objectIdentifier

This is the role_identifier_ID property in the Security DAM. The definition of that property is "This attribute is defined by ISO 22600-2 as ISO ObjectIdentifier."
WE RENAMED THIS. WAS THIS OK TO DO????

Constraints:

Properties:

Aggregation	None
Alias
Association
Association End
Class	SecurityRole
Datatype
Default
Default Value
Is Composite	false
Is Derived	false
Is Derived Union	false
Is Leaf	false
Is Ordered	false
Is Read Only	false
Is Static	false
Is Unique	true
Keywords
Lower	1
Lower Value	(1)
Multiplicity	1
Name	objectIdentifier
Name Expression
Namespace	SecurityRole
Opposite
Owner	SecurityRole
Owning Association
Owning Template Parameter
Qualified Name	FHIM::SecurityAndPrivacy::SecurityRole::objectIdentifier
Stereotype
Template Parameter
Type	«II» Id
Upper	1
Upper Value	(1)
Visibility	Public

 permission

Public Permission permission

Constraints:

Properties:

Aggregation	Composite
Alias
Association	securityRole_permission
Association End
Class	SecurityRole
Datatype
Default
Default Value
Is Composite	true
Is Derived	false
Is Derived Union	false
Is Leaf	false
Is Ordered	false
Is Read Only	false
Is Static	false
Is Unique	true
Keywords
Lower	0
Lower Value	(0)
Multiplicity	*
Name	permission
Name Expression
Namespace	SecurityRole
Opposite
Owner	SecurityRole
Owning Association
Owning Template Parameter
Qualified Name	FHIM::SecurityAndPrivacy::SecurityRole::permission
Stereotype
Template Parameter
Type	Permission
Upper	*
Upper Value	(*)
Visibility	Public

 policy

Public Policy policy

Pointer to a set of policies that define the privileges and responsibilities of the owning Security Role.

Constraints:

Properties:

Aggregation	None
Alias
Association	securityRole_policy
Association End
Class	SecurityRole
Datatype
Default
Default Value
Is Composite	false
Is Derived	false
Is Derived Union	false
Is Leaf	false
Is Ordered	false
Is Read Only	false
Is Static	false
Is Unique	true
Keywords
Lower	0
Lower Value	(0)
Multiplicity	*
Name	policy
Name Expression
Namespace	SecurityRole
Opposite
Owner	SecurityRole
Owning Association
Owning Template Parameter
Qualified Name	FHIM::SecurityAndPrivacy::SecurityRole::policy
Stereotype
Template Parameter
Type	Policy
Upper	*
Upper Value	(*)
Visibility	Public

 roleIdentifier

Public «II» Id roleIdentifier

This is the role_identifier property in the security DAM, and is defined by ISO 22600-2 as a Set of InstanceIndentifiers.

Constraints:

Properties:

Aggregation	None
Alias
Association
Association End
Class	SecurityRole
Datatype
Default
Default Value
Is Composite	false
Is Derived	false
Is Derived Union	false
Is Leaf	false
Is Ordered	false
Is Read Only	false
Is Static	false
Is Unique	true
Keywords
Lower	1
Lower Value	(1)
Multiplicity	1
Name	roleIdentifier
Name Expression
Namespace	SecurityRole
Opposite
Owner	SecurityRole
Owning Association
Owning Template Parameter
Qualified Name	FHIM::SecurityAndPrivacy::SecurityRole::roleIdentifier
Stereotype
Template Parameter
Type	«II» Id
Upper	1
Upper Value	(1)
Visibility	Public

• We're assuming that Security Role is a collection of Permissions. Therefore, we've changed Functional Role and Structural Role from subtypes of Security Role to composites instead (because otherwise a security role could be a "plain" security role, a functional role, or a structural role, but never both a functional role and a security role at the same time. Need to validate this. If Security Role were recursive, then we could change back to subtypes rather than composites, if desired.