...
The designer/owner of a form/flow may designate who may use the form/flow with options for:
public access (anyone including anonymous users)
private access (the designer/owner only)
public in tenant (authentication authenticated users logged into tenant only)
Custom set of users or roles only.
The designer/owner of a form/flow may designate separately who may view individual submissions or may edit individual submissions. Either of these access lists may contain specific sets of individual users or roles. Additionally, specific access to individual submissions can be dynamically determined from the form/flow content at the time of submission in order to provide very granular access to specific submissions to specific users/roles.
...