In order to upload envelopes and check envelope statuses, a user must belong to a User Group that has been assigned the Hosted Signature Uploading privilege.
In order to connect DocuSign to OnBase, configure signature locations, and schedule hosted signature polling, a user must belong to a User Group that has been assigned the Hosted Signature Config privilege.
If a user should only be allowed to check envelope statuses, only assign the Hosted Signature Monitoring privilege to the user's User Group. In conjunction with either of these privileges, the Modify privileged must also be assigned to allow users in a User Group to return an envelope to OnBase after it has been signed.