Admin Center: Manage Security & Controls

With Security & Controls, you can control permissions for global notifications and requests, group memberships, and account discovery. You can also set controls for attachments and supported chat providers.

Permissions

You can define granular controls on who is allowed to receive notifications and join groups in your organization.

Notification and requests 

With Notifications and Requests, you can control who can receive notifications/requests from sheets based on the users’ level of access to sheets and memberships in the organization.

Groups

Control membership to groups created within the organization. By default, anyone can be added to a group. You can restrict groups to people who are part of the organization. 

Account Discovery

With Account Discovery enabled, people with an email address that matches the system admin’s email domain can make a request to join the org as a licensed user. This request shows up in the License Request Management section. If a customer has configured the Custom Upgrade setting, the request is forwarded accordingly. Customers with User Auto Provisioning (UAP) enabled cannot configure Account Discovery; UAP takes precedence over Account Discovery in those cases.

Forms

Only Enterprise customers can set system-wide form permissions. 

By default, all forms are anonymous and available to anyone with a link to the form. You can limit form access to people with a Smartsheet login or to people on your Smartsheet account via the safe sharing list. 

When these settings are selected in the Admin Center, they apply as the minimum permissions for all forms on your account and cannot be changed in the form builder.

Offline Forms

Offline Form Submission allows your team to access the mobile app and submit forms without an internet connection.  You can toggle this ability on/off to control access for users on your account.

For more information about this feature, check out Things to know about mobile offline forms.

Content & Chat Controls

You can configure controls on what type of items can be published and what sources of data are allowed in Smartsheet. Additionally, you can pick from one of two supported chat providers to further simplify communication among your users while using Smartsheet.

Attachments

Based on your organization’s security requirements, Admins can choose to enable/disable different sources for attachments. Depending on the sources enabled, members in the organization can upload files from their own computers, by attaching a Link (URL) to a site, or from third-party cloud storage services including Google Drive, OneDrive, Box, Dropbox, Evernote, or Egnyte. For more information about uploading attachments, see Uploading Attachments.

If you disable file upload to S3, form builders will not be able to add an attachment field to forms in your account, and respondents will not be able to attach a file to the form.

Images in Sheet Fields

You can toggle off Images in Sheet Fields to remove the ability to add images to cells in sheets owned by licensed users on your account. Existing images that were previously added to cells won't be removed. 

This setting is available to customers on a Enterprise or Business plans. For more information about this feature, see Adding Images to Grid View.

Web Content Widget

You can toggle off Web Content Widget to remove the ability to add web content widgets to dashboards owned by licensed users on your account. 

Customers on an Enterprise plan can allow specific company domains as supported sources for the web content widget by validating those domains and checking the Include domains… box. For more information about this feature, see Add Interactive Content to a Dashboard With the Web Content Widget. 

Chat Integration

You can select a supported chat provider to further simplify communication among your users while using Smartsheet.

Use Chat Integration to control which chat providers are enabled. Only one selection can be active. For more information about setting up Chat integrations, see Chat Integration Options for Smartsheet

Publishing controls

You can configure controls on what type of items can be published and what sources of data are allowed in Smartsheet.

If you have multiple plans and one plan is the main plan under Enterprise Plan Manager, you can set publishing controls for reports, sheets and dashboards in the main plan and those controls will be inherited by all managed plans. You can change these settings on the managed plan if you are an administrator on the main plan.

Report Publishing

You can toggle off Report Publishing to immediately unpublish all published reports. Based on your organization’s security requirements, you can also control whether published reports can be viewed by anyone or only by people in your own organization. For more information, see Report Publishing.

Sheet Publishing

You can toggle off Sheet Publishing to immediately unpublish all published sheets. Based on your organization’s security requirements, you can also control whether published sheets can be viewed by anyone or only by people in your own organization. For more information, see Sheet Publishing.

Dashboard Publishing

You can toggle off Dashboard Publishing to immediately unpublish all published dashboards. Based on your organization’s security requirements, you can also control whether published dashboards can be viewed by anyone or only by people in your own organization. For more information, see Dashboard Publishing.

Calendar Publishing

You can toggle off Calendar Publishing to remove the ability to publish a sheet's calendar view to iCal format. Calendars already published will become unpublished immediately. For more information about this feature, see  Publishing a Smartsheet Calendar to iCal format.