Users with a Basic or Limited Access account, such as data entry staff or external analysts, are restricted to interacting with the data itself. While they can perform essential tasks like creating, viewing, or editing records, their inability to manage user rights or modify the forms is a critical security feature. Their permissions are often tightly controlled; for example, they might be restricted to "View Only" access or prevented from exporting any data fields that contain direct identifiers. This tiered approach to permissions ensures that the data remains secure and the project structure stays consistent throughout the research lifecycle.

Users in leadership roles, such as the Primary Investigator (PI) or Project Administrator, are typically granted the right to add, modify, or remove other users from the project. Crucially, they also hold the permissions to build and modify data collection instruments using the Online Designer, adjust complex features like branching logic, and control when the project is moved from a testing environment to Production Status for live data collection. These high-level permissions are necessary for anyone responsible for the overall setup and structural maintenance of the study.