Why Role-Based Access Breaks at Hospital Scale — and What Replaces It

Attribute- and policy-based controls are makes minimum-necessary tractable without strangling care