Permissions

Custom Fields have their own permission, visible in the role permission list once the feature is enabled for your instance. It controls the schema (groups and fields) — not whether a user can enter values on a member, campaign, or reward form.

Permission level	Effect
No access	The Custom Fields item is hidden from the side menu, and the schema screens can't be reached by URL. Values are still visible and editable on the Member / Direct / Automation / Referral / Challenge / Leaderboard / Fortune Wheel / Reward forms.
View	The schema editor is read-only — all fields and buttons are disabled, and the summary step can't be reached. Values on entity forms remain editable.
View + Modify	Full management of the schema — create, edit, activate/deactivate, and delete groups and fields.

Managing the schema and filling in values are two separate permissions. A user without any access to the Custom Fields module can still enter and update values on member and campaign forms, as long as they have the underlying Member/Campaign/Reward permission.

For the full permission list, see Available Permissions (ACL).