Signatures permissions and states
Reference organization access, document and invitation lifecycles, template ownership, and signer-link boundaries.
Signatures requires authenticated organization access, then applies resource ownership and assignment checks to documents, invitations, templates, and stamps.
Permission matrix
| Action | Requirement |
|---|---|
| Open the Signatures workspace | Authenticated organization member with signature-view access |
| Upload and prepare a document | Organization member with completed contact setup |
| Edit recipients or fields | Document uploader while the document is Draft |
| Open a document | Its uploader or an assigned signer with organization access |
| Inspect invitation statuses | Document uploader |
| Open a template | Owner, direct recipient, everyone-share recipient, or authorized administrator |
| Change template sharing or transfer ownership | Template owner |
| Manage a stamp | The user who owns the stamp |
| Manage organization-wide signature settings | Organization admin with signature-settings permission |
An invited signer’s access-link route is a separate public journey. Possessing a signed-in workspace URL does not replace the invitation’s access check, and a real invitation token must never be published.
Document states
| State | Allowed next state | Meaning |
|---|---|---|
| Draft | Sent or cancelled | Uploader can still edit the agreement. |
| Sent | Partially signed, fully signed, or cancelled | Invitations are active. |
| Partially signed | Fully signed or cancelled | At least one required signature is complete and at least one remains. |
| Fully signed | None | All required signing is complete. |
| Cancelled | None | The signing request is terminated. The uploader may clone it into a fresh draft. |
The Agreements list uses customer-facing scopes rather than exposing every internal state directly: All, Action required, Waiting for others, Sent, Completed, Draft, and Archived.
Invitation states
| Display label | Meaning |
|---|---|
| Pending | Invitation exists and awaits recipient action. |
| Sent | The initial invitation was sent and still awaits recipient action. |
| Viewed | Recipient opened the signing journey but has not completed it. |
| Signed | Invitation is complete. |
| Cancelled | Sender or system invalidated the invitation. |
| Expired | Invitation passed its usable window. |
| Declined | Reserved by the status model and display layer; the current signer UI does not provide a decline action. |
Reminders apply only to outstanding invitations. Sender cancellation is narrower than the complete internal transition model and is offered only when the invitation row presents Cancel.
Template states and sharing
A template is active or archived. It can be personal, shared directly, shared with everyone in scope, or surfaced as a starter template. Ownership controls transfer and sharing changes even when another member can open the template.