CFA Level I Exam · Introduction to Digital Assets
Permissioned vs Permissionless Blockchain Networks
Updated 7 October 2026 · Fact-checked
A permissionless network lets anyone join, read, validate and transact without approval. A permissioned network restricts participation to approved members. To solve exam questions, identify who can join and validate, who controls rules, how visible the data is, then match the use case to the network type.
Understand Permissioned vs Permissionless Networks
A distributed ledger is a shared record kept by many computers (nodes) instead of one central database. The key design question is: who is allowed to take part? The answer splits networks into two types.
A permissionless network is open. Anyone can download the software, run a node, send transactions and, under the network's consensus rules, take part in validating them. No one needs to approve you. Bitcoin and Ethereum are standard examples. Because participants are unknown to each other, these networks rely on incentives and consensus mechanisms (such as proof of work or proof of stake) to create trust. Ledger data is usually visible to everyone, so transparency is high, but privacy is lower.
A permissioned network is restricted. A participant needs authorization to join, and often to read data or validate transactions. An operator or a consortium of known organizations sets who gets in and what each member can do. Because participants are identified, the network can use lighter consensus methods, often faster and cheaper, and can keep data private. Banks sharing a ledger for settlement are a typical case.
Governance differs too. In permissionless networks, rules change through community processes, such as developer proposals and node or validator agreement, so control is decentralized and change can be slow or contested. In permissioned networks, a defined administrator or consortium decides, so decisions are faster and accountability is clear, but the network is more centralized.
The trade-off is the core idea. Permissionless gives openness, censorship resistance and no single point of control. Permissioned gives privacy, speed, control and easier regulatory compliance, at the cost of some decentralization. Neither is better in every case. Choose by the use case.
Key formulas to remember
- Permissionless network
- Open access + anonymous or pseudonymous participants + public data + decentralized governance
- Typical features, not absolute rules. Examples: Bitcoin, Ethereum.
- Permissioned network
- Authorized access + known participants + restricted data + central or consortium governance
- Typical features. Used where privacy, control and compliance matter.
- Trade-off rule
- More openness → more decentralization and transparency, less privacy and control
- Reverse for permissioned networks.
How to solve Permissioned vs Permissionless Networks questions
Use this sequence for any question comparing or classifying blockchain networks.
- 1Read the stem and find who is allowed to join, read and validate.
- 2If anyone can join without approval, classify it as permissionless. If approval is needed, classify it as permissioned.
- 3Check governance: community or protocol-based means permissionless; an operator or consortium means permissioned.
- 4Check transparency and privacy: public ledger data points to permissionless; restricted visibility points to permissioned.
- 5Match the use case: open, censorship-resistant, public currency suggests permissionless; regulated, confidential, known-party processes suggest permissioned.
- 6Eliminate options that attach a feature to the wrong type, then pick the remaining best fit.
Quickest way: Who gets in? Who decides?
When to use it: Use when you have about 90 seconds and the options mix features of both network types.
- Ask one question: does a gatekeeper approve participants?
- No gatekeeper: permissionless, open, public, decentralized.
- Gatekeeper: permissioned, restricted, private, faster, centrally governed.
- Cross out any option that gives a feature to the wrong type.
Common mistakes in Permissioned vs Permissionless Networks
Treating permissionless as meaning no rules at all.
The word suggests absence of control.
Fix: Permissionless means no approval is needed to join. Consensus rules still govern what is valid.
Assuming permissioned networks are not blockchains or are not decentralized at all.
Students link blockchain only to Bitcoin.
Fix: Permissioned networks are still distributed ledgers, just with restricted participation and more centralized governance.
Saying permissioned networks are always more transparent because members are known.
Confusing identified participants with public data.
Fix: Known participants do not mean public data. Permissioned ledgers usually restrict who can read.
Matching confidential interbank settlement to a permissionless network.
Focusing on security or popularity rather than the use case.
Fix: Confidentiality, compliance and known counterparties point to permissioned.
Stating that permissionless networks have no governance.
Equating decentralized with ungoverned.
Fix: Governance exists but is spread across developers, validators and users, and changes can be slow.
Worked examples
Example 1
A consortium of five banks builds a shared ledger for settling trades. Only approved banks may validate and view transactions. Which describes the network?
A. Permissionless, because several parties share the ledger
B. Permissioned, because participation is limited to approved members
C. Permissionless, because the ledger uses cryptography
Show the solution
- Find the access rule: only approved banks can validate and view.
- Approval required means a gatekeeper exists, so the network is permissioned.
- Option A is wrong: sharing among several parties does not make a network open.
- Option C is wrong: permissioned networks also use cryptography.
Answer: B
Example 2
Which feature is most typical of a permissionless network compared with a permissioned one?
A. Governance by a single administrator
B. Restricted read access for non-members
C. Open participation without prior approval
Show the solution
- Recall that permissionless networks allow anyone to join.
- Option A describes central governance, typical of permissioned.
- Option B describes restricted visibility, typical of permissioned.
- Option C describes open participation, the defining permissionless feature.
Answer: C
Exam tips
- Questions are usually conceptual. Anchor on access control first, then map governance, transparency and use case.
- Watch for wording like 'most likely' or 'best suited'. Pick the type that fits the stated need for privacy or openness.
- Do not assume an absolute. Features such as speed and privacy are typical tendencies, not guarantees.
- Since there is no penalty for wrong answers, always answer. Eliminating the option that gives a feature to the wrong type often leaves one choice.
Practice questions from Introduction to Digital Assets
- An analyst compares two ledgers. Ledger X lets anyone run a validating node and relies on economic incentives to secure the record. Ledger Y…
- Which of the following characteristics most likely makes valuing a cryptocurrency such as Bitcoin more difficult than valuing a typical oper…
- Compared with a traditional equity investment, a long position in a cryptocurrency held directly by an investor is most likely to expose the…
- In a distributed ledger network, which feature most accurately distinguishes a permissionless network from a permissioned network?
- Which feature of a permissionless network most likely distinguishes it from a permissioned network?
Permissioned vs Permissionless Networks: frequently asked questions
What is the main difference between permissioned and permissionless blockchains?
Access. A permissionless network lets anyone join and validate without approval. A permissioned network allows only authorized participants, which also changes governance, privacy and speed.
Are public blockchains the same as permissionless ones?
In practice the terms are often used together, since public networks are open to anyone. For the exam, focus on the access and validation rules described in the question.
Which network type suits regulated financial institutions?
Permissioned networks usually suit them better, because participants are identified, data can be kept confidential and a governing body can enforce compliance rules.
Why are permissioned networks often faster?
Participants are known and trusted to a degree, so the network can use simpler consensus methods with fewer validators. This usually means higher throughput, though it is a tendency, not a rule.