Resource access

In order to view and edit information from ClaimCenter, a caller needs to be able to access one or more endpoints. This type of access is known as endpoint access. For example, if a caller has access to the GET /claims endpoint, that caller can view claims.

However, having access to a given endpoint does not mean a caller can view every resource that endpoint could return. In some cases, callers can access only certain instances of the relevant resource. For example, the GET /claims endpoint could be available to a policyholder, an adjuster, and a service vendor. But each of these users have access to a different set of claims:

• The policyholder can see only the claims associated with the policies they hold.
• The adjuster can see only the claims assigned to them.
• The service vendor can see only the claims that have a service request assigned to them.

This type of access is known as resource access. Resource access determines which instances of a given resource are available to a given caller. Resource access is defined by a set of resource access strategies. This topic describes how resource access strategies are assigned to a caller, how they are executed for each call, and how to interpret the base configuration files so that you can understand how resource access is executed.