Access Tokens / QR Codes — Tenant Admin
Overview
Access tokens and QR codes provide three different public surfaces: a SingleSurvey token for answering one survey, a Portal (TenantActiveSurveys) token for choosing among permitted active surveys and submitting responses, and a read-only Viewer (ResponseViewer) token for viewing permitted response/template data. Passcode or portal-login requirements may still apply even though no dashboard account is required.
How Public Access Works
- A Tenant Admin or authorized user chooses the correct token scope: SingleSurvey, Portal, or Viewer.
- The token is embedded in a URL or encoded into a QR code.
- The participant scans the QR code or opens the link.
- Survanta validates tenant, scope, state, dates, passcode, opens/response capacity, plan access, and capabilities before allowing the scope-specific operation.
Public participants are not registered users. They do not have email addresses, passwords, or permission groups in the system.
Token Types
- SingleSurvey: Bound to one survey. It can allow anonymous and/or multiple submissions, with optional start, expiry, passcode, maximum opens, and maximum responses. Its link uses
/p/{token}. - Portal: Tenant-wide by contract and has no survey selector. It lists permitted active surveys and can accept selected-survey submissions according to its anonymous/multiple-submission, expiry, passcode, and response controls. Its link uses
/portal/{token}. - Viewer: Can cover all permitted surveys or one survey and exposes only selected read capabilities: answer templates, own submitted responses, submitted-response list, response details/files, and export. It never completes or edits a survey. Its link uses
/viewer/{token}.
Generating the Correct Token
- Open Access Tokens / QR from the dashboard navigation.
- Open the separate create action for Single Survey, Portal, or Viewer. Do not use Viewer for respondent collection.
- For SingleSurvey select a survey; Portal has no survey selector; Viewer can optionally select one survey.
- Configure the token options:
- Availability: Optional start and/or expiry where supported.
- Passcode: Optional additional secret.
- Capacity: Maximum opens/responses and multiple-submission behavior where supported; leaving a value empty means no token-specific cap, not exemption from tenant plan limits.
- Viewer capabilities: Enable only the read operations the audience needs.
- Click Generate.
The token URL and QR code image are displayed. Download the QR code image or copy the link for distribution.
Managing Tokens
- Revoke: Invalidate a token immediately. Any link or QR code using that token will stop working.
- View Usage: See open/response analytics supported for public collection tokens.
- List: Separate list surfaces exist for public links, Portal tokens, and Viewer tokens, subject to their own permissions and plan limits.
Security Considerations
- SingleSurvey tokens are bound to one survey. Portal tokens are tenant-wide, and Viewer tokens may be tenant-wide or survey-scoped.
- Token values are randomly generated and cannot be guessed.
- Revoke tokens immediately if a QR code or link is distributed to the wrong audience.
- Tokens also stop working when inactive, not yet started, expired, revoked, exhausted, over open/response limits, blocked by subscription state, or denied by a missing capability.
- Viewer tokens are read-only. Never distribute a Viewer link to respondents as though it were a survey-completion link.
QR Code Distribution
Download the QR code image and use it in:
- Printed materials (flyers, posters, booklets).
- Digital media (email newsletters, websites, presentations).
- Physical locations (reception desks, kiosks, field locations).
Participants who scan the code are taken directly to the survey without needing any Survanta account.