Restricting Send Row

aks@presto

Is there a way to restrict where a row can be sent through the Send Row function?

I see that the Enterprise plan has the exact domain whitelisting functionality that I'm looking for but that's not a feasible option for us.

Has anyone come up with a solution to prevent an authorized user who needs full edit rights from taking advantage of that access and sending rows (with attachments/comments) to an unauthorized user/domain?

Kelsey Hayden

Hello,

Thanks for reaching out! As you noted SysAdmins on Enterprise plans have access to configure Security Controls to manage the way their users are working in Smartsheet. They have the ability to set up an Approved Domain Sharing List to prevent sheets and information from being shared or sent to unauthorized email addresses. This option is only available to users on an Enterprise plan, which means that your account would need to be upgraded to have access to these security options. 

In an effort to try and prevent sheets from being shared with unauthorized users you could consider sharing collaborators with Editor-Cannot Share permissions. This will allow collaborators to edit data on the sheet, but it will prevent them from sharing the sheet with others who should not have access to the data. 

For more information on the different sheet sharing permission levels I also recommend checking out this article from our Help Center: https://help.smartsheet.com/articles/1155182-sharing-permission-levels

Please let me know if you have any questions about this and I’ll be more than happy to advise further!

aks@presto

Hi Kelsey, thanks for the reply.  The enterprise plan isn't viable for us (I spoke briefly to Sales and they said we needed a minimum of 25 seats for the plan---and we don't even have 25 people in the company, lol).

Doesn't it seem to be a big loophole if a person who can't share the sheet with an unauthorized user could just email the rows to that unauthorized user via the Send Row feature?

Is there any way we could obtain the "approved domain sharing" functionality as an add-on to our Business Plan?

Or have the Send Row function disabled/restricted?