creating a pre-ppa approval form with role-based access features