Hello, I am currently working on a provider portal where providers (utilizing practitioner resource for provider) can access ServiceRequest and DiagnosticReport data assigned to them. I want to apply access policies in such a way that whatever media is attached in Service Request and Diagnostic Report, should only be accessible to the assignee only if they have access to them. I would appreciate any guidance on this.