Allow roles to be restricted to viewing only patients that match a defined cohort.