ISO/TS 21298:2008定义了一个用于表达功能和结构角色的模型，并将其填充为一组基本角色，以便在国际卫生应用中使用。角色通常分配给作为参与者的实体。这将侧重于人员的角色（例如卫生专业人员的角色）及其在提供护理（例如护理对象）方面的角色。 ISO/TS 21298:2008中提到的角色不限于特权管理目的，尽管特权管理和访问控制是本技术规范的应用之一。ISO/TS 21298:2008未涉及与权限相关的规范。本技术规范将角色和权限视为单独的构造。 ISO/TS 22600-1中提供了有关权限、策略和访问控制关系的更多详细信息。

ISO/TS 21298:2008 defines a model for expressing functional and structural roles and populates it with a basic set of roles for international use in health applications. Roles are generally assigned to entities that are actors. This will focus on roles of persons (e.g. the roles of health professionals) and their roles in the context of the provision of care (e.g. subject of care). Roles addressed in ISO/TS 21298:2008 are not restricted to privilege management purposes, though privilege management and access control is one of the applications of this Technical Specification. ISO/TS 21298:2008 does not address specifications related to permissions. This Technical Specification treats the role and the permission as separate constructs. Further details regarding the relationship with permissions, policy and access control are provided in ISO/TS 22600-1.