User access to the API is administered using the EV User Logon Admin Tool.
For example, if a user is to be allowed read access for patient demographics, allergies, and home medications.
FHIR-Roles user/Patient.read,user/AllergyIntolerance.read,user/MedicationStatement.read