{
  "activatesubscription": {
    "name": "ActivateSubscription",
    "description": "Grants permission to activate a subscription to enable billing for a user",
    "accessLevel": "Write",
    "resourceTypes": [
      {
        "name": "Domain",
        "required": true,
        "conditionKeys": [],
        "dependentActions": []
      },
      {
        "name": "Subscription",
        "required": true,
        "conditionKeys": [],
        "dependentActions": []
      }
    ],
    "conditionKeys": [],
    "dependentActions": []
  },
  "cancelappointment": {
    "name": "CancelAppointment",
    "isPermissionOnly": true,
    "description": "Grants permission to cancel an appointment",
    "accessLevel": "Write",
    "resourceTypes": [
      {
        "name": "Domain",
        "required": true,
        "conditionKeys": [],
        "dependentActions": []
      },
      {
        "name": "Integration",
        "required": true,
        "conditionKeys": [],
        "dependentActions": []
      }
    ],
    "conditionKeys": [],
    "dependentActions": []
  },
  "createagent": {
    "name": "CreateAgent",
    "isPermissionOnly": true,
    "description": "Grants permission to create a new agent with an initial version in DRAFT state",
    "accessLevel": "Write",
    "resourceTypes": [
      {
        "name": "Agent",
        "required": true,
        "conditionKeys": [],
        "dependentActions": []
      },
      {
        "name": "Domain",
        "required": true,
        "conditionKeys": [],
        "dependentActions": []
      }
    ],
    "conditionKeys": [],
    "dependentActions": []
  },
  "createdomain": {
    "name": "CreateDomain",
    "description": "Grants permission to create a new domain for managing HealthAgent resources",
    "accessLevel": "Write",
    "resourceTypes": [],
    "conditionKeys": [
      "aws:RequestTag/${TagKey}",
      "aws:TagKeys"
    ],
    "dependentActions": [
      "health-agent:TagResource",
      "iam:PassRole"
    ]
  },
  "createintegration": {
    "name": "CreateIntegration",
    "isPermissionOnly": true,
    "description": "Grants permission to create a new integration for a domain",
    "accessLevel": "Write",
    "resourceTypes": [
      {
        "name": "Domain",
        "required": true,
        "conditionKeys": [],
        "dependentActions": []
      },
      {
        "name": "Integration",
        "required": true,
        "conditionKeys": [],
        "dependentActions": []
      }
    ],
    "conditionKeys": [],
    "dependentActions": []
  },
  "createsession": {
    "name": "CreateSession",
    "isPermissionOnly": true,
    "description": "Grants permission to create a new session with specified agent configurations",
    "accessLevel": "Write",
    "resourceTypes": [
      {
        "name": "Agent",
        "required": true,
        "conditionKeys": [],
        "dependentActions": []
      },
      {
        "name": "Domain",
        "required": true,
        "conditionKeys": [],
        "dependentActions": []
      },
      {
        "name": "Session",
        "required": true,
        "conditionKeys": [],
        "dependentActions": []
      }
    ],
    "conditionKeys": [],
    "dependentActions": []
  },
  "createsubscription": {
    "name": "CreateSubscription",
    "description": "Grants permission to create a new subscription within a domain for billing and user management",
    "accessLevel": "Write",
    "resourceTypes": [
      {
        "name": "Domain",
        "required": true,
        "conditionKeys": [],
        "dependentActions": []
      },
      {
        "name": "Subscription",
        "required": true,
        "conditionKeys": [],
        "dependentActions": []
      }
    ],
    "conditionKeys": [],
    "dependentActions": []
  },
  "deactivatesubscription": {
    "name": "DeactivateSubscription",
    "description": "Grants permission to deactivate a subscription to stop billing for a user",
    "accessLevel": "Write",
    "resourceTypes": [
      {
        "name": "Domain",
        "required": true,
        "conditionKeys": [],
        "dependentActions": []
      },
      {
        "name": "Subscription",
        "required": true,
        "conditionKeys": [],
        "dependentActions": []
      }
    ],
    "conditionKeys": [],
    "dependentActions": []
  },
  "deleteagent": {
    "name": "DeleteAgent",
    "isPermissionOnly": true,
    "description": "Grants permission to delete an agent configuration and all its versions",
    "accessLevel": "Write",
    "resourceTypes": [
      {
        "name": "Agent",
        "required": true,
        "conditionKeys": [],
        "dependentActions": []
      },
      {
        "name": "Domain",
        "required": true,
        "conditionKeys": [],
        "dependentActions": []
      }
    ],
    "conditionKeys": [],
    "dependentActions": []
  },
  "deletedomain": {
    "name": "DeleteDomain",
    "description": "Grants permission to delete a domain and all associated resources",
    "accessLevel": "Write",
    "resourceTypes": [
      {
        "name": "Domain",
        "required": true,
        "conditionKeys": [],
        "dependentActions": []
      }
    ],
    "conditionKeys": [],
    "dependentActions": []
  },
  "deleteintegration": {
    "name": "DeleteIntegration",
    "isPermissionOnly": true,
    "description": "Grants permission to delete an integration",
    "accessLevel": "Write",
    "resourceTypes": [
      {
        "name": "Domain",
        "required": true,
        "conditionKeys": [],
        "dependentActions": []
      },
      {
        "name": "Integration",
        "required": true,
        "conditionKeys": [],
        "dependentActions": []
      }
    ],
    "conditionKeys": [],
    "dependentActions": []
  },
  "getagent": {
    "name": "GetAgent",
    "isPermissionOnly": true,
    "description": "Grants permission to retrieve an agent configuration, defaulting to the most recent version if not specified",
    "accessLevel": "Read",
    "resourceTypes": [
      {
        "name": "Agent",
        "required": true,
        "conditionKeys": [],
        "dependentActions": []
      },
      {
        "name": "Domain",
        "required": true,
        "conditionKeys": [],
        "dependentActions": []
      }
    ],
    "conditionKeys": [],
    "dependentActions": []
  },
  "getcareteamprovider": {
    "name": "GetCareTeamProvider",
    "isPermissionOnly": true,
    "description": "Grants permission to retrieve the care team provider of a patient",
    "accessLevel": "Read",
    "resourceTypes": [
      {
        "name": "Domain",
        "required": true,
        "conditionKeys": [],
        "dependentActions": []
      },
      {
        "name": "Integration",
        "required": true,
        "conditionKeys": [],
        "dependentActions": []
      }
    ],
    "conditionKeys": [],
    "dependentActions": []
  },
  "getdomain": {
    "name": "GetDomain",
    "description": "Grants permission to retrieve information about a domain",
    "accessLevel": "Read",
    "resourceTypes": [
      {
        "name": "Domain",
        "required": true,
        "conditionKeys": [],
        "dependentActions": []
      }
    ],
    "conditionKeys": [],
    "dependentActions": []
  },
  "getintegration": {
    "name": "GetIntegration",
    "isPermissionOnly": true,
    "description": "Grants permission to get an existing integration",
    "accessLevel": "Read",
    "resourceTypes": [
      {
        "name": "Domain",
        "required": true,
        "conditionKeys": [],
        "dependentActions": []
      },
      {
        "name": "Integration",
        "required": true,
        "conditionKeys": [],
        "dependentActions": []
      }
    ],
    "conditionKeys": [],
    "dependentActions": []
  },
  "getmedicalscribelisteningsession": {
    "name": "GetMedicalScribeListeningSession",
    "description": "Grants permission to retrieve details about an existing Medical Scribe listening session",
    "accessLevel": "Read",
    "resourceTypes": [
      {
        "name": "Domain",
        "required": true,
        "conditionKeys": [],
        "dependentActions": []
      },
      {
        "name": "Subscription",
        "required": true,
        "conditionKeys": [],
        "dependentActions": []
      }
    ],
    "conditionKeys": [],
    "dependentActions": []
  },
  "getpatient": {
    "name": "GetPatient",
    "isPermissionOnly": true,
    "description": "Grants permission to retrieve patient information",
    "accessLevel": "Read",
    "resourceTypes": [
      {
        "name": "Domain",
        "required": true,
        "conditionKeys": [],
        "dependentActions": []
      },
      {
        "name": "Integration",
        "required": true,
        "conditionKeys": [],
        "dependentActions": []
      }
    ],
    "conditionKeys": [],
    "dependentActions": []
  },
  "getpatientinsightsjob": {
    "name": "GetPatientInsightsJob",
    "description": "Grants permission to get details of a started patient insights job",
    "accessLevel": "Read",
    "resourceTypes": [
      {
        "name": "Domain",
        "required": true,
        "conditionKeys": [],
        "dependentActions": []
      },
      {
        "name": "PatientInsightsJob",
        "required": true,
        "conditionKeys": [],
        "dependentActions": []
      }
    ],
    "conditionKeys": [],
    "dependentActions": []
  },
  "getpractitioner": {
    "name": "GetPractitioner",
    "isPermissionOnly": true,
    "description": "Grants permission to retrieve practitioner information",
    "accessLevel": "Read",
    "resourceTypes": [
      {
        "name": "Domain",
        "required": true,
        "conditionKeys": [],
        "dependentActions": []
      },
      {
        "name": "Integration",
        "required": true,
        "conditionKeys": [],
        "dependentActions": []
      }
    ],
    "conditionKeys": [],
    "dependentActions": []
  },
  "getsessioncontext": {
    "name": "GetSessionContext",
    "isPermissionOnly": true,
    "description": "Grants permission to retrieve structured session context including attributes and collected data",
    "accessLevel": "Read",
    "resourceTypes": [
      {
        "name": "Domain",
        "required": true,
        "conditionKeys": [],
        "dependentActions": []
      },
      {
        "name": "Session",
        "required": true,
        "conditionKeys": [],
        "dependentActions": []
      }
    ],
    "conditionKeys": [],
    "dependentActions": []
  },
  "getsubscription": {
    "name": "GetSubscription",
    "description": "Grants permission to retrieve information about a subscription",
    "accessLevel": "Read",
    "resourceTypes": [
      {
        "name": "Domain",
        "required": true,
        "conditionKeys": [],
        "dependentActions": []
      },
      {
        "name": "Subscription",
        "required": true,
        "conditionKeys": [],
        "dependentActions": []
      }
    ],
    "conditionKeys": [],
    "dependentActions": []
  },
  "invokeagent": {
    "name": "InvokeAgent",
    "isPermissionOnly": true,
    "description": "Grants permission to invoke an agent within a session with streaming response support",
    "accessLevel": "Write",
    "resourceTypes": [
      {
        "name": "Domain",
        "required": true,
        "conditionKeys": [],
        "dependentActions": []
      },
      {
        "name": "Session",
        "required": true,
        "conditionKeys": [],
        "dependentActions": []
      }
    ],
    "conditionKeys": [],
    "dependentActions": []
  },
  "listagents": {
    "name": "ListAgents",
    "isPermissionOnly": true,
    "description": "Grants permission to list all agents in a domain",
    "accessLevel": "List",
    "resourceTypes": [
      {
        "name": "Domain",
        "required": true,
        "conditionKeys": [],
        "dependentActions": []
      }
    ],
    "conditionKeys": [],
    "dependentActions": []
  },
  "listappointmentslots": {
    "name": "ListAppointmentSlots",
    "isPermissionOnly": true,
    "description": "Grants permission to list available appointment slots",
    "accessLevel": "Read",
    "resourceTypes": [
      {
        "name": "Domain",
        "required": true,
        "conditionKeys": [],
        "dependentActions": []
      },
      {
        "name": "Integration",
        "required": true,
        "conditionKeys": [],
        "dependentActions": []
      }
    ],
    "conditionKeys": [],
    "dependentActions": []
  },
  "listdomains": {
    "name": "ListDomains",
    "description": "Grants permission to list domains for a given account",
    "accessLevel": "List",
    "resourceTypes": [],
    "conditionKeys": [],
    "dependentActions": []
  },
  "listintegrations": {
    "name": "ListIntegrations",
    "isPermissionOnly": true,
    "description": "Grants permission to list integrations for a domain",
    "accessLevel": "List",
    "resourceTypes": [
      {
        "name": "Domain",
        "required": true,
        "conditionKeys": [],
        "dependentActions": []
      }
    ],
    "conditionKeys": [],
    "dependentActions": []
  },
  "listpatientappointments": {
    "name": "ListPatientAppointments",
    "isPermissionOnly": true,
    "description": "Grants permission to list patient appointments",
    "accessLevel": "Read",
    "resourceTypes": [
      {
        "name": "Domain",
        "required": true,
        "conditionKeys": [],
        "dependentActions": []
      },
      {
        "name": "Integration",
        "required": true,
        "conditionKeys": [],
        "dependentActions": []
      }
    ],
    "conditionKeys": [],
    "dependentActions": []
  },
  "listpatientinsurancecoverages": {
    "name": "ListPatientInsuranceCoverages",
    "isPermissionOnly": true,
    "description": "Grants permission to list patient insurance coverages",
    "accessLevel": "Read",
    "resourceTypes": [
      {
        "name": "Domain",
        "required": true,
        "conditionKeys": [],
        "dependentActions": []
      },
      {
        "name": "Integration",
        "required": true,
        "conditionKeys": [],
        "dependentActions": []
      }
    ],
    "conditionKeys": [],
    "dependentActions": []
  },
  "listproviders": {
    "name": "ListProviders",
    "isPermissionOnly": true,
    "description": "Grants permission to retrieve active providers available for scheduling appointments with a patient",
    "accessLevel": "Read",
    "resourceTypes": [
      {
        "name": "Domain",
        "required": true,
        "conditionKeys": [],
        "dependentActions": []
      },
      {
        "name": "Integration",
        "required": true,
        "conditionKeys": [],
        "dependentActions": []
      }
    ],
    "conditionKeys": [],
    "dependentActions": []
  },
  "listsubscriptions": {
    "name": "ListSubscriptions",
    "description": "Grants permission to list all subscriptions within a domain",
    "accessLevel": "List",
    "resourceTypes": [
      {
        "name": "Domain",
        "required": true,
        "conditionKeys": [],
        "dependentActions": []
      }
    ],
    "conditionKeys": [],
    "dependentActions": []
  },
  "listtagsforresource": {
    "name": "ListTagsForResource",
    "description": "Grants permission to list the tags for the specified resource",
    "accessLevel": "List",
    "resourceTypes": [
      {
        "name": "Domain",
        "required": false,
        "conditionKeys": [],
        "dependentActions": []
      }
    ],
    "conditionKeys": [],
    "dependentActions": []
  },
  "matchpatient": {
    "name": "MatchPatient",
    "isPermissionOnly": true,
    "description": "Grants permission to match a patient",
    "accessLevel": "Read",
    "resourceTypes": [
      {
        "name": "Domain",
        "required": true,
        "conditionKeys": [],
        "dependentActions": []
      },
      {
        "name": "Integration",
        "required": true,
        "conditionKeys": [],
        "dependentActions": []
      }
    ],
    "conditionKeys": [],
    "dependentActions": []
  },
  "publishagent": {
    "name": "PublishAgent",
    "isPermissionOnly": true,
    "description": "Grants permission to publish an agent configuration version",
    "accessLevel": "Write",
    "resourceTypes": [
      {
        "name": "Agent",
        "required": true,
        "conditionKeys": [],
        "dependentActions": []
      },
      {
        "name": "Domain",
        "required": true,
        "conditionKeys": [],
        "dependentActions": []
      }
    ],
    "conditionKeys": [],
    "dependentActions": []
  },
  "rescheduleappointment": {
    "name": "RescheduleAppointment",
    "isPermissionOnly": true,
    "description": "Grants permission to reschedule an appointment",
    "accessLevel": "Write",
    "resourceTypes": [
      {
        "name": "Domain",
        "required": true,
        "conditionKeys": [],
        "dependentActions": []
      },
      {
        "name": "Integration",
        "required": true,
        "conditionKeys": [],
        "dependentActions": []
      }
    ],
    "conditionKeys": [],
    "dependentActions": []
  },
  "scheduleappointment": {
    "name": "ScheduleAppointment",
    "isPermissionOnly": true,
    "description": "Grants permission to schedule an appointment for a patient",
    "accessLevel": "Write",
    "resourceTypes": [
      {
        "name": "Domain",
        "required": true,
        "conditionKeys": [],
        "dependentActions": []
      },
      {
        "name": "Integration",
        "required": true,
        "conditionKeys": [],
        "dependentActions": []
      }
    ],
    "conditionKeys": [],
    "dependentActions": []
  },
  "startmedicalscribelisteningsession": {
    "name": "StartMedicalScribeListeningSession",
    "description": "Grants permission to start a new Medical Scribe listening session for real-time audio transcription",
    "accessLevel": "Write",
    "resourceTypes": [
      {
        "name": "Domain",
        "required": true,
        "conditionKeys": [],
        "dependentActions": []
      },
      {
        "name": "Subscription",
        "required": true,
        "conditionKeys": [],
        "dependentActions": []
      }
    ],
    "conditionKeys": [],
    "dependentActions": []
  },
  "startpatientinsightsjob": {
    "name": "StartPatientInsightsJob",
    "description": "Grants permission to start a new patient insights job",
    "accessLevel": "Write",
    "resourceTypes": [
      {
        "name": "Domain",
        "required": true,
        "conditionKeys": [],
        "dependentActions": []
      },
      {
        "name": "PatientInsightsJob",
        "required": true,
        "conditionKeys": [],
        "dependentActions": []
      }
    ],
    "conditionKeys": [],
    "dependentActions": []
  },
  "tagresource": {
    "name": "TagResource",
    "description": "Grants permission to add the specified tags to the specified resource",
    "accessLevel": "Tagging",
    "resourceTypes": [
      {
        "name": "Domain",
        "required": false,
        "conditionKeys": [
          "aws:ResourceTag/${TagKey}"
        ],
        "dependentActions": []
      }
    ],
    "conditionKeys": [
      "aws:TagKeys",
      "aws:RequestTag/${TagKey}"
    ],
    "dependentActions": []
  },
  "untagresource": {
    "name": "UntagResource",
    "description": "Grants permission to remove the tags identified by the TagKeys list from a resource",
    "accessLevel": "Tagging",
    "resourceTypes": [
      {
        "name": "Domain",
        "required": false,
        "conditionKeys": [],
        "dependentActions": []
      }
    ],
    "conditionKeys": [
      "aws:TagKeys"
    ],
    "dependentActions": []
  },
  "updateagent": {
    "name": "UpdateAgent",
    "isPermissionOnly": true,
    "description": "Grants permission to update a draft agent configuration, creating a new draft version if none exists",
    "accessLevel": "Write",
    "resourceTypes": [
      {
        "name": "Agent",
        "required": true,
        "conditionKeys": [],
        "dependentActions": []
      },
      {
        "name": "Domain",
        "required": true,
        "conditionKeys": [],
        "dependentActions": []
      }
    ],
    "conditionKeys": [],
    "dependentActions": []
  },
  "updateintegration": {
    "name": "UpdateIntegration",
    "isPermissionOnly": true,
    "description": "Grants permission to update an existing integration",
    "accessLevel": "Write",
    "resourceTypes": [
      {
        "name": "Domain",
        "required": true,
        "conditionKeys": [],
        "dependentActions": []
      },
      {
        "name": "Integration",
        "required": true,
        "conditionKeys": [],
        "dependentActions": []
      }
    ],
    "conditionKeys": [],
    "dependentActions": []
  },
  "updatesession": {
    "name": "UpdateSession",
    "isPermissionOnly": true,
    "description": "Grants permission to update session attributes such as departmentId and appointmentType",
    "accessLevel": "Write",
    "resourceTypes": [
      {
        "name": "Domain",
        "required": true,
        "conditionKeys": [],
        "dependentActions": []
      },
      {
        "name": "Session",
        "required": true,
        "conditionKeys": [],
        "dependentActions": []
      }
    ],
    "conditionKeys": [],
    "dependentActions": []
  }
}