-
[New] An IT-governed yes to AI: what’s new from Smartsheet
If AI rollouts keep stalling in security review because no one can show what touches data as it moves between systems, here’s what’s new to help. Available now MCP connectors (80+ tools) that bring Smartsheet data into the LLMs approved and governed by IT, inside each person’s existing permissions AI admin controls, with…
-
Significant Spam Submissions Through Smartsheet Forms – Need a Solution
We are experiencing a significant and increasing amount of spam submissions through multiple Smartsheet forms. CAPTCHA is already enabled on the affected forms, but the spam continues to get through. The volume has become disruptive enough that we need a more effective solution. We have also been working with Smartsheet…
-
Decentralized System Administration for Large Enterprises
For organizations with multiple divisions or business units, how are others handling Smartsheet System Administration when there is a single Admin Center for the entire enterprise? In our environment, Smartsheet is used across multiple divisions within the same organization. While having a centralized Admin Center makes…
-
Why is no one getting back to us????
I’m posting this publicly because Smartsheet has failed to deal appropriately with a serious security and data privacy issue we reported more than a month ago. Ticket: [09345672] Despite repeated follow-ups, we still have no meaningful response, no accountable owner, no confirmation that the risk has been contained, and no…
-
Who is Barbara Sierota?
Overnight, we received a single sheet access request from Barbara Sierota with an email of automation@smartsheet.************.com.au. Who or what is this? The single sheet is in a workspace to which only 2 admins have access. Is it possible that they have received a link with a typo error that inadvertently matches our…
-
TLS version
Hi, I need the TLS version that is being used to encrypt data in motion. Where can I find this information? I am not using Smartsheet Gov. I can find that Smartsheet Gov uses TLS 1.2. Is it the same for non-Gov instances of Smartsheet?
-
personal Time Entry Report
Allow Users to run a personal Time Entry Report in Resource Management showing only their own time entries without requiring elevated Resource Management reporting permissions. Business justification: Users need to analyze and export their own historical time entries. Current reporting permissions provide access to broader…
-
User not showing up to assign roles
I have a user that has accepted their invite. They do not show up in the roles section for me to assign the user roles.
-
WorkApps - Ability to add a comment without sharing the sheet?
We have quite an issue brewing. We have a sheet with sensitive columns on it, thus moving to a WorkApp was a great solution. We could allow the users to be editors on the report for the rows where 'current user' was appropriate and only display the minimal columns. It seemed like a great way to collaborate, as they are…
-
What's your Smartsheet architecture?
Hey Smartsheet Community 🌍️ Over the years I've found that one of the biggest challenges with Enterprise Smartsheet deployments isn't building solutions - it's creating a repeatable architecture that scales. I currently use a simple model that I devised a little while ago: Store → Compile datasets in a standardised,…
-
Reporting on security settings for forms
To help bolster security, we need to be able to report which forms have these features enabled: Require Smartsheet login Restrict to Safe sharing list Reduce spam with CAPTCHA File uploads This would greatly assist us with determining and reducing risk.
-
Enhanced Governance Controls for Native Smartsheet Access Requests
Problem Statement Currently, Smartsheet’s native “Request Access” functionality provides very limited governance and administrative control for enterprise environments. When users request access to a sheet, report, or dashboard: The permission level is automatically predetermined (commonly Editor) Users cannot specify the…
-
Safe Sharing Audit
Is anyone aware of a method to inspect the login history of individuals added to your Safe Sharing Exempt List? We feel it would be wise to audit this periodically and then disavow anyone who has not logged in after x months
-
Jira Connector support for OAuth 2.0 now generally available
February 24, 2026 The Smartsheet Jira Connector now supports OAuth 2.0 authentication, aligning with Atlassian's latest security standards. This update brings enhanced security, a streamlined consent flow, and better compatibility with future Jira updates — so you can keep your integrations running smoothly and…
-
MFA rollout bug - tool to bulk exempt users
While doing an internal collaborator MFA rollout, I encountered a bug that was forcing non-internal domain collaborators to enroll in MFA. We have an Enterprise plan and one of the reasons we are on Enterprise is that it allows domain-level MFA selection. For whatever reason, it is now not possible to undo the MFA…
-
Admin Access
I'm one of two Admins for Smartsheet for the city government. We're very guarded when handing out licenses and have guidelines for Workspace creation. One of those guidelines is that they have to add both Admins to their workspaces (w/admin permissions) so that when they run into problems, we can easily help. We still get…
-
Changes to Smartsheet login experience: What admins should know
(Updated March 17th, 2026) Smartsheet is relaunching updates to our web login experience. These changes pertain only to the user login flow and do not affect authentication behavior, provisioning, or SSO settings. No action is needed – this refresh simply improves clarity and reduces friction during sign-in. What's…
-
Unauthorized User Invitation on My Smartsheet Account
Hi Smartsheet Team, I would like to bring to your attention that an unknown person has invited a user to my Smartsheet account without my consent a few hours ago. I did not perform this action. I have attached the screenshots for your review. Request you to kindly look into this issue at the earliest and help me understand…
-
Session timeout controls for system admins - now generally available!
October 30, 2025 System Administrators in Business and Enterprise plans can now configure how long users stay signed in before being logged out for inactivity — anywhere from 15 minutes to 30 hours. This update makes it easy to align Smartsheet session policies with your organization’s security and compliance standards,…
-
Enforcing MFA for all users (not only Members) and for all login methods?
We use Smartsheet for several of our clients. One of our clients has requested that we enforce multi-factor authentication (MFA) using an authenticator app such as Google Authenticator or Microsoft Authenticator. My colleague (our Smartsheet admin) enabled MFA in the admin settings, but we are running into two issues: Only…