By default, an average user can only view the instances belonging to the form definitions they have created or have permission to view. However, they can also view form definitions and instances other users created, provided they have consent. Based on the “Permissions” assigned by the admin or the user who created the definition, the average user can “View,” “Design,” or “Remove” the form instance.
Admin users can restrict the permission to view, design, and remove access to the form instances for average users by clicking on the “Permissions” menu item.

Configure the form attachment permission by selecting any privileges from the drop-down list. Click the Save Permission button. Users with appropriate permissions can attach or download file attachments to the form instance.

Search and add the desired user(s) for whom permission must be set for the selected definition. The user should at least type 3 char(s) to initiate the search.

Select the user from the list and click the "Add" button. A confirmation message is displayed in the top right-end corner.

Likewise, the permissions can be granted to users of specific application roles, as shown in the following UI.

The admin user can allow permissions for any or all the form instances for the selected user by checking the view and design and removing checkboxes. The user can only have access to these permissions. Above, the "RegularUser” can view, design, and remove the selected form instance.