We have a scenario where hierarchy is like project admin -> main admins -> organization admins . Both project admin and main admin can create org admin but org admin created by main admin is visible to main admin but org admin created by project admin is not visible to main admin. In short, resources created by project admin are not visible to lower-level users. Is there any way so that this would make possible? Please suggest.

Hi @vijay.hambar , could you provide an example of the kinds of resources created by the project admin that should be hidden?

Hi @rahul1 There are 2 levels, main org who has their admins, below that its another org level provider group who has their admins. We have set accesspolicy for each org such that main admin have access to all resources from main org as well as provider groups below and provider group admins will have access to resources belong to that provider group only. There is many to many relationship between main orgs and provider groups. Following is part of access policy to be set on main org and provider group. { resourceType: 'AccessPolicy', name:

${organizationId} Policy

, meta: { project: projectId, }, compartment: { reference:

Organization/${organizationId}

, display:

${organizationId} Compartment

, }, resource: [ { resourceType: 'Basic', criteria:

Basic?_compartment=Organization/${organizationId}

, }, { resourceType: 'BiologicallyDerivedProduct', criteria:

BiologicallyDerivedProduct?_compartment=Organization/${organizationId}

, }, .... ] } Now scenario is project admin can create practitioner which belongs to provider group. So when it gets added, its not visible to provider group admin as well as main org admin as per the policy set on them.

Hi @vijay.hambar ! I'll point you to my answer in this post, which seems ot ahve a similar setup: https://discord.com/channels/905144809105260605/1244620791253962782

Hi @rahul1 , As I mentioned earlier, we have access policies set using compartment so user will have access to resources having respective compartments. Now we have another scenario where a patient can be a part of multiple organizations; But patient resource will have only 1 compartment as per the access policy of its provider group. So, it will be visible to that provider group doctors only. Is there any way to achieve this? Your suggestion would be helpful.

Right now we don't support more than 1 meta.account property at this time, but it is something we're looking to support in the future. You can track the progress on this feature here: https://github.com/medplum/medplum/issues/3668