Access to All workspaces, sheets, dashboards and reports

I am sorry, but, I do not agree with this request, as written, so maybe it could be fine-tuned? We have many HR, research, financial and other very private data in some of our sheets and, as a System Admin, I do not want access to this data unless the owner or other authorized individual specifically grants it to me. Having it the way you suggest feels like a violation of audit and compliance regulations.

I think you could have a policy that "asks" your owners to grant view access to a CEO-READONLY account and give that to the CEO and, as a system admin, you could audit that these shares are/are not in place by using the Sheet Access report. Then, only the CEO, and NOT the system admin would be authorized to login using the CEO-READONLY account.

I feel like if I had this functionality then I could held accountable for any violations or misuse of the tool and that sounds to be above my pay grade.

I have been thinking about a similar need to what you're describing and contemplating the use of a survey to capture it. We could build a sheet from the sheet access report and send update requests to the owner of each sheet asking them to "check off/certify" the types of data contained in the sheet. This puts the responsibility on them. If they don't answer or answer honestly that's on them. I'm not risking my job over their misuse.

Know what I mean? Happy to discuss further.

Hi all, thanks for the suggestion!

As part of the Asset Ownership launch that's coming up, we are providing a mechanism for SysAdmins and the new Plan Asset Admin role to get access to content. This still requires the SsyAdmin or Plan Asset Admin to have a link to the asset and if they click on it, they need to request access. If the asset has an owner or admin(s), the request goes to the owner and admin(s) to review and grant access. This prevents someone from accessing potentially confidential data. If the owner is deactivated and there are no admins on the asset, the access request goes to the Plan Asset Admin. If no Plan Asset Admin is assigned, the request goes to the SysAdmin. In that situation, the Plan Asset Admin or SysAdmin can grant themselves permission and view the contents of the asset.

We are also evaluating building reports to get a list of all assets in your plan. This is still being designed and we'd love any feedback you have around that.

Yes @Will.Parente -  "Add the ability to reassign sheets without being shared to the sheet would be great."

@Aaron Manley We're working on some reports to enable additional visibility of assets to sysadmins/plan asset admins. For now, SysAdmin and Plan Asset Admin still need to request access to assets. If the owner is deactivated and there are no admins, the access request will go to them and they can approve their own request, and access the asset. We are working on improving this flow.

Same position here, exactly. Thanks Jeff.