Browse topics · People

People

Consent and access

Choose contact permissions and understand why Report access, care-record consent, and profile access differ.

Relationship permissions determine what you can open or change. Consent status separately affects selected care-record information and delivery workflows. Seeing a Person does not grant every kind of access to that Person's data.

Choose contact permissions

  1. Open People > Contacts and select an active contact.
  2. Select Permissions.
  3. Choose what that contact may do with your information.
  4. Select Save permissions and wait for success.

These choices grant access from you to the contact. They do not change what the contact shares with you. Canceling discards unsaved changes.

ControlWhat it permits
View my ReportsReport detail, evidence, exports, and Reports available for Aggregates. Other feature and license requirements still apply.
Create Reports about meSelecting you as the Report's About subject. Enabling this also enables Report viewing; clearing viewing clears creation.
Notes AccessView only includes Notes in your personal workspace and Notes About you. Write adds creating/editing in your workspace, without archiving, deletion, or sharing management through this grant.
Profile Documents AccessView only includes current files and history. Write adds upload, replacement, rename, and permanent deletion.
Profile details and summariesSeparate view or write access to structured profile details, their photos, and summaries.
Pin Guides to my ShelfAdding, removing, and ordering Guides in the contact's own supporter row. It does not grant Library authoring.
GuardianBroad account Guardian authority when the contact and your Unlimited Guardians grant are active. See Guardians, including passthrough and session revocation.

For the three access-level controls, None removes that grant. Another relationship can still authorize the same information. Care-role designations and the organization affiliations displayed on profiles do not create grants.

Certificate viewing follows separate contact and Catalog-audience rules. The controls above do not include a certificate-sharing permission.

Where subject consent is required, the summary can be:

  • Active: a current active record has reached its effective date and has not expired.
  • Missing: no effective record is available, including when the only consent starts in the future.
  • Expired: consent has expired or is recorded as expired.
  • Revoked: consent has been revoked.

A current active record takes precedence when several records exist. Revoking one record does not make the overall summary revoked if another remains active.

Person observation timelines can hide values and show a consent notice. A care-record Document linked to a particular consent can be unavailable when that consent is revoked, expired, or not yet effective. EHR delivery also requires active subject consent.

Ordinary Report detail and exports use Report access and do not require separate active subject consent. A readable Report and a redacted observation in the Person's care records can therefore coexist. Consent does not replace Report authorization or the separate permissions for Profile Documents.

Resolve missing information

  1. Check your account, workspace, and the exact surface showing the notice.
  2. Review the relevant contact permission, Guardian relationship, active care team and assignment, or organization access.
  3. Read whether the message describes missing permission, consent, or an unavailable source. Use Try again after correcting the cause.
  4. For an incorrect consent record, ask a CareMap administrator to review its status and dates. The current People interface does not include a consent record editor.

Uploading a document labeled Consent does not itself activate consent. Removing relationships can end an access path without erasing historical records. Saved contact grants can return on reconnection; see contact removal.