Privileges Required to Use Submit Forms
A submit form is a property of the Process Definition, so you need privileges to edit the Process Definition of the form.
To use User Message forms, you need one the following roles:
scheduler-business-user
role in combination with Use privileges on Restricted Scheduler Session Specification