What's the difference between a provider app v.s. system app?

[Jason]

Issue Summary:

As pointed out in title, I'm not clear on the differences between a provider app and a system app.

According to documentation the only difference it mentions is the online access vs offline access which I'm also not clear on the differences.

For my scenario, the app I want to build is a provider/hospital side app that once gets refresh token from customer authentication can help manage all the appointments for that provider/hospital in background as long as they don't revoke the refresh token.

Should I be creating a provider app or a system app?

[Jenni Syed (Cerner)]

Hi Jason,

A provider app is access on behalf of a user (user being a practitioner): https://fhir.cerner.com/authorization/#requesting-authorization-on-behalf-of-a-user

This is also what a patient app is, where the user is a patient or authorized proxy.

A system app is access on behalf of a system (no user involved): https://fhir.cerner.com/authorization/#requesting-authorization-on-behalf-of-a-system

When accessing on behalf of a provider, we take on the responsibility for enforcing restrictions, privileges, and privacy for that provider/patient combination. We also audit access as required for HIPAA and CEHRT when the provider accesses a patient's record (among other considerations). For system access, the other system will take on this responsibility for any clinical data that is accessed downstream.

~ Jenni

[Jason]

Does a system app have access to same api endpoints?

When a system app is created is it tied to a specific system or can it be connected to any system?

[Jenni Syed (Cerner)]

The intent is that a system account represents a specific application, similar to accessing on behalf of a user where the client id represents a specific app the user launches. Both can access several tenants on our side.

~ Jenni

[Nilesh]

On Monday, January 14, 2019 at 11:04:45 AM UTC-6, Jenni Syed (Cerner) wrote:

The intent is that a system account represents a specific application, similar to accessing on behalf of a user where the client id represents a specific app the user launches. Both can access several tenants on our side.

~ Jenni

Hi Jenni,

Is there a portal that shows my list of apps (Provider / System / Patient) in one place ?

At present the portal https://code.cerner.com/developer/smart-on-fhir/apps shows only provider or patient Apps. Is that correct ?

Thanks

Nilesh