Forms permissions and states
Reference the signed-in administration boundary, form lifecycle, response settings, and respondent-link rules.
Forms is organization-scoped. The organization is resolved from the signed-in route and, for resource routes, checked again against the requested form.
Permission matrix
| Action | Organization member | Organization admin |
|---|---|---|
| Open the Forms list and view form metadata | Yes | Yes |
| Create a form | No | Yes |
| Edit sections, questions, settings, or order | No | Yes |
| Preview the respondent renderer | No | Yes |
| Publish a draft | No | Yes |
| Reveal the generic share URL or QR code | No | Yes |
| Read response summaries or individual submissions | No | Yes |
| Download answer files or response CSV | No | Yes |
Denied management actions return the viewer to an accessible product surface rather than granting partial resource access.
Form states
| State | Meaning in the signed-in workspace |
|---|---|
| Draft | Editable and previewable. It does not accept responses and has no shareable link. |
| Published | Accepts responses. Share, Responses, and CSV actions are available when applicable. |
| Closed | Does not accept new responses. Existing responses and CSV remain available to authorized admins. |
| Archived | Retained as a non-active catalog state. It is not a respondent-ready state. |
Only a draft can be published. The generic Share action is shown only for a published, standalone form. An event-owned form uses the owning event as its entry point instead.
Response settings
| Control | Effect |
|---|---|
| Only available to signed-in Infra One users | Requires a signed-in Infra One user on the open-response route. |
| Allow anonymous responses | Lets a recipient-token response remain unattributed. It does not change attribution on the generic open link. |
| Limit to one response per recipient | Limits a signed-in responder on the open link and a recipient-specific distribution. A logged-out open-link responder can still create another anonymous response. |
On the generic open link, a signed-in response is attributed to the user and a logged-out response is anonymous. On a recipient-token link, the distribution identifies the recipient unless Allow anonymous responses is enabled for that form.
Question types
The builder supports Short text, Long text, Single choice, Multiple choice, Dropdown, Rating, Yes / no, Number, Date, and File upload.
Question visibility can depend on another answer using is or is not. A hidden question produces no answer row, so it appears blank in individual and exported data.
Link boundary
Forms has two respondent route families: an open form link and a recipient-token link. Their authorization and submission procedures belong to the external responder documentation. Neither raw token nor real response data belongs in a screenshot, support ticket, or public example.