A logged in user can add to a patient's record if the user is in the same team as a patient or a patient has been shared with that user.

A patient (or carer or family member) can also add to (but not view) their record if they are sent a temporary authentication link.