Admin Center: Set security controls for your account

• Access the controls from the Settings menu in Admin Center. 

Permissions

Define who can receive notifications and join groups in your organization.

Notification and requests 

Control who can receive notifications/requests from sheets based on the users’ level of access to sheets and memberships in the organization.

Groups

Control membership to groups created within the organization. By default, anyone can be added to a group. You can restrict groups to people who are part of the organization. 

Account discovery

With Account Discovery enabled, people with an email address that matches the system admin’s email domain can make a request to join the org as a licensed user. This request shows up in the License Request Management section.

If you have configured Custom Upgrades, the request is forwarded accordingly.

If you use User Auto Provisioning (UAP) you cannot configure Account Discovery; UAP takes precedence over Account Discovery in those cases.

Forms

Only Enterprise customers can set system-wide form permissions. 

By default, all forms are anonymous and available to anyone with a link to the form. You can limit form access to people with a Smartsheet login or to people on your Smartsheet account via the safe sharing list. 

When these settings are selected in the Admin Center, they apply as the minimum permissions for all forms on your account and cannot be changed in the form builder.

Offline forms

Offline Form Submission allows your team to access the mobile app and submit forms without an internet connection.  Toggle this setting on/off to control access for users on your account.

For more information about this feature, check out Things to know about mobile offline forms.

Content & chat controls

Configure controls on what type of items can be published and what sources of data are allowed in Smartsheet. Additionally, you can pick from one of two supported chat providers.

Attachments

Allow or block different sources for attachments. Depending on the sources allowed, members in the organization can upload files from their own computers, by attaching a Link (URL) to a site, or from third-party cloud storage services including Google Drive, OneDrive, Box, Dropbox, Evernote, or Egnyte. For more information about uploading attachments, see Uploading Attachments.

If you turn off the Upload From Computer option for attachments, the security configuration settings will block functionality available in User Management such as the Sheet Access Report.

If you block file upload to S3, form builders will not be able to add an attachment field to forms in your account, and respondents will not be able to attach a file to the form.

Images in sheet fields

Toggle off remove the ability to add images to cells in sheets owned by licensed users on your account. Existing images won't be removed. 

This setting is available to customers on Enterprise or Business plans. For more information about this feature, see Adding Images to Grid View.

Web content widget

Toggle off Web Content Widget to remove the ability to add web content widgets to dashboards owned by licensed users on your account. 

Customers on an Enterprise plan can allow specific company domains as supported sources for the web content widget by validating those domains and checking the Include domains… box. For more information about this feature, see Add Interactive Content to a Dashboard With the Web Content Widget. 

Chat integration

Select a supported chat provider to further simplify communication among your users while using Smartsheet.

Use Chat Integration to control which chat providers are enabled. Only one selection can be active. For more information about setting up Chat integrations, see Chat Integration Options for Smartsheet

Publishing controls

You can configure controls on what type of items can be published and what sources of data are allowed in Smartsheet.

If you have multiple plans and one plan is the main plan under Enterprise Plan Manager, you can set publishing controls for reports, sheets, and dashboards in the main plan and those controls will be inherited by all managed plans. You can change these settings on the managed plan if you are an administrator on the main plan.

Report publishing

You can toggle off Report Publishing to immediately unpublish all published reports. Based on your organization’s security requirements, you can also control whether published reports can be viewed by anyone or only by people in your own organization. For more information, see Report Publishing.

Sheet publishing

Toggle off Sheet Publishing to immediately unpublish all published sheets. Based on your organization’s security requirements, you can also control whether published sheets can be viewed by anyone or only by people in your own organization. For more information, see Sheet Publishing.

Dashboard publishing

Toggle off Dashboard Publishing to immediately unpublish all published dashboards. Based on your organization’s security requirements, you can also control whether published dashboards can be viewed by anyone or only by people in your own organization. For more information, see Dashboard Publishing.

Calendar publishing

Toggle off Calendar Publishing to remove the ability to publish a sheet's calendar view to iCal format. Calendars already published will become unpublished immediately. For more information about this feature, see  Publishing a Smartsheet Calendar to iCal format.