Permission & Access Issues

How to Restrict Microsoft Forms File Attachments to Specific Groups

Kushani Nimanthika Oct 8, 2026 870 views

Question details

The user wants to configure Microsoft Forms so that uploaded file attachments are only visible to specific notification groups (like HR) while remaining hidden from others (like IT).

How to Restrict Microsoft Forms File Attachments to Specific Groups

Product: Microsoft Forms
Device & OS: not provided
Scenario: Routing form responses to multiple departments but restricting sensitive attachment access to an authorized subset of users.
Observed behavior: Microsoft Forms lacks built-in controls to selectively hide attachments based on notification groups natively.

Before you start

Ensure you have access to Microsoft Power Automate and administrative permissions for the SharePoint or OneDrive folder where the form attachments are saved.

Solution 1Recommended

Use Power Automate to Separate Notifications and Attachments

Since Microsoft Forms doesn't support conditional attachment visibility natively, use Power Automate to send tailored emails to different groups.

Power Automate allows you to capture the form submission data and branch the resulting actions. You can create a flow that sends the basic text response to the IT department, while sending the full details along with the file attachments exclusively to the HR department.

Create a new automated cloud flow

Log in to Microsoft Power Automate, click 'Create', and select 'Automated cloud flow'. Choose 'When a new response is submitted' in Microsoft Forms as your trigger.

Retrieve the form response details

Add a new action step and search for 'Get response details'. Select your specific Form ID and map the Response ID dynamic content.

Send standard notification to IT

Add a 'Send an email (V2)' action targeting the IT department. Include only the standard form response data in the email body, omitting the attachment fields.

Send full notification with attachments to HR

Add another 'Send an email (V2)' action targeting the HR department. Include the response data and add the uploaded file attachments to this specific email configuration.

Use Power Automate to Separate Notifications and Attachments

Community Support: If you need specific workflow configurations, the Microsoft Power Automate Community offers extensive templates for complex form routing.

Solution 2

Restrict Access to the Attachment Storage Folder

Ensure that the underlying folder where Forms saves attachments is restricted to authorized personnel only.

Free Microsoft Office alternative

Experience Seamless Document Management with WPS Office

While resolving Microsoft Forms and Power Automate workflows, consider WPS Office as a free, lightweight, and highly compatible alternative for your daily document management. WPS Office offers robust tools for handling spreadsheets, documents, and presentations with seamless compatibility with Microsoft Office formats.

1. Visit the WPS Official Website: Go to the WPS Office website and click the free download button for your operating system.
2. Install the Software: Run the downloaded installer and follow the quick on-screen instructions to set up the suite.
3. Start Managing Documents: Open WPS Office to instantly create, edit, and manage your daily files with full compatibility.

Fully compatible with Microsoft Word, Excel, and PowerPoint formats.Built-in PDF editing tools for secure document sharing and form handling.Lightweight design ensures fast startup and smooth operation.Familiar user interface for a zero-learning-curve transition.

microsoft office alternative - wps office

Frequently Asked Questions

Can I restrict attachment visibility directly inside Microsoft Forms?

No, Microsoft Forms does not have built-in features to selectively show or hide attachments based on the recipient's notification group. You must use Power Automate to customize email routing.

Where are Microsoft Forms attachments saved by default?

If the form is created in your personal account, attachments are saved in your OneDrive. If the form is created within a Microsoft 365 Group, they are saved in the group's default SharePoint document library.

Will unauthorized users be able to view the file if they intercept the email?

If you properly restrict the SharePoint or OneDrive folder permissions, unauthorized users will not be able to open the file link even if they manage to see the attachment URL.

Document & File Issues