# Security & Permissions Considerations

Because mass emailing carries risk, it’s important to control who can
trigger sends and how.

------------------------------------------------------------------------

## Front‑End Trigger Forms

- Safest way to let non‑admin staff send campaigns.
- Embed the Master Control Notification Form on a hidden front‑end page.
- Restrict access so only trusted roles can see and submit it.

------------------------------------------------------------------------

## Role Restrictions

- Use a role editor or membership plugin to limit access by capability.
- Prevents unauthorized users from seeing or editing form settings.

------------------------------------------------------------------------

## No Backend Access

- Staff should not need access to Gravity Forms feeds or settings.
- Keep those in admin control to avoid misconfiguration.

------------------------------------------------------------------------

## Audit & Logging

- All sends are logged on entries and in batch details.

------------------------------------------------------------------------

By setting clear permission boundaries and using front‑end trigger
forms, you can safely delegate sending while protecting your site and
reputation.
