# Setting workflow permissions

**Workflow Permissions**

Workflow permissions allow the template creator to control what each signatory can access and perform during the signing journey. These permissions are configured at the signatory level and help enforce document confidentiality and controlled collaboration.

***

**Where to Configure**

In the **Add Participants** step, click on the signatory from the left panel to open their **Configure settings** panel on the right. Under **Signatory Settings**, the following workflow permissions are available.

<figure><img src="https://1693119202-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2FXNKpOPGIHdEkmaF2RQso%2Fuploads%2F2arEKOVjcZeOxVt29Uia%2Fimage.png?alt=media&#x26;token=90a32199-4c77-4557-a460-90e8847f3994" alt=""><figcaption></figcaption></figure>

***

**Available Permission Controls**

**1. Restrict Document Download**

* **Don't Allow to download documents** — Enable this toggle to prevent the selected signatory from downloading the document during or after the signing process. This is useful for restricting document access for specific participants while still allowing them to sign.

**2. Control Attachment and Comment Visibility**

The second **Configure Attachment Profile** table at the bottom of the Signatory Settings panel lists all other signatories in the workflow. For each co-signatory listed, the template creator can control what the currently configured signatory is permitted to view:

* **Hide Attachments** — Check this box to prevent the selected signatory from viewing attachments uploaded by the listed co-signatory.
* **Hide Comments** — Check this box to prevent the selected signatory from viewing comments added by the listed co-signatory.

These controls are applied per signatory pair, giving precise visibility management across all participants in the workflow.

***

**Key Notes**

* Workflow permissions are signatory-specific and must be configured individually for each participant who requires restricted access.
* Once configured, click **Save Details** to apply the permissions before proceeding to the next step.
