Does anyone know if it is possible to create an Access Policy that gives a user (Practitioner) access to ALL resources in an Organization without having to explicitly list every resource in the Access Policy? I've added an Organization to the meta.account field in every relevant resource. I can retrieve the resources when explicitly adding the resource to the AccessPolicy:

"resource": [
    {
      "resourceType": "Patient",
      "criteria": "Patient?_compartment=%organization_id"
    },
    {
      "resourceType": "DiagnosticReport",
      "criteria": "DiagnosticReport?_compartment=%organization_id"
    },
    {
      "resourceType": "ImagingStudy",
      "criteria": "ImagingStudy?_compartment=%organization_id"
    },
    {
      "resourceType": "Observation"
    },
    {
      "resourceType": "MedicationRequest"
    },
    {
      "resourceType": "Task"
    }
]

I wanted to see if there is a simpler way to utilize Organization level security without having to explicitly add every resource to the AccessPolicy.

There is now way to get around explicit listing at present @bnapora !

Okay...thanks for the response.