Yes you have to restrict access to the form itself on Form Sharing. Make sure it's not available system wide and only share the access on the restricted form to those that can see it. Don't include the agencies. Our agencies each have their own detailed form and they can only see those forms so that...
We place the internal review files into a folder called Internal Review and then restrict the access to that folder to just the internal design team. Then we upload a clean file into the Stakeholder Review folder. That file can be shared out with anyone for proofing feedback.
I do this. We have 2 separate custom forms. We just don't share access to the confidential form with that agencies group. We keep our agencies in separate user groups and restrict them down that way.
Some definitely do log in. I did test for a user now and if they don't log in it looks like it still works. I'm going to propose this out to some smaller teams to test more. Thanks.
I can not share the survey. The trigger is every day at 5pm EST a search for projects completed with these send survey field Yes on them will post the update. Then will change to completed and post the date of the survey being sent.
We do this using Workfront Fusion. Bulk import 250-300 projects for the quarter with templates attached, portfolio, program attached and custom metadata.