See Database Support.
Owner-based and group-based permissions are useful when you want users to only see their own data, or maybe also the data of other users in the same group. For Orbeon Forms to be able to show a user only her data, Orbeon Forms needs to know who that user is, and hence this can only be used for authenticated users.
To use this feature for a form, in Form Builder, when editing a form, open the Permissions dialog, and check boxes on the Owner and Group member lines as appropriate for your situation.
There is no particular configuration.
When using this features with eXist, you need to set the following property:
<propertyas="xs:string"name="oxf.xforms.forward-submission-headers"value="Orbeon-Username Orbeon-Roles Orbeon-Group"/>
With Orbeon Forms 4.3, owner/group-based permissions were not enabled by default, and you must set the following 2 properties to enable them:
<property as="xs:boolean" name="oxf.fr.support-owner-group" value="true"/><property as="xs:boolean" name="oxf.fr.support-autosave" value="true"/>
Setup users for access control - How to setup Orbeon Forms so that users and roles are provided.
Login & Logout - Optional user menu for providing links to login and logout functions.
Access control for deployed forms - How to control access to deployed forms.
Form fields - How to control access to specific form fields based on the user user's roles.