After this article
You will be able to connect Smartsheet to Lumos to sync users, their roles, and last login. You can also deprovision, downgrade, or transfer users’ data during offboarding.Capabilities
Required plan and roles
- Smartsheet plan: no minimum plan is required.
- Smartsheet role: the connecting user must be a System Admin.
- OAuth scopes requested during setup (both default):
ADMIN_USERS: add and remove users from your Smartsheet organization account, plus create groups and manage membership. Required for deprovisioning, downgrades, and data transfer.READ_USERS: retrieve users and groups for your Smartsheet organization account.
- Permission scoping: there is no read-only variant. Both scopes are requested in the OAuth grant.
Read-only access vs provisioning
Is read-only possible? No. Smartsheet’s OAuth grant always requests bothADMIN_USERS and READ_USERS together, and there’s no read-only variant of the connection.
What full provisioning requires. A System Admin completing the OAuth connection and accepting both requested scopes, which together enable deprovisioning, license downgrades, and data transfer. Follow the steps below.
Watch out for. Because both scopes are always requested, you can’t grant Lumos visibility into Smartsheet without also granting it the ability to deprovision, downgrade, or transfer users’ data. Deprovisioned users become free collaborators with read-only access to their own items unless their data was transferred first.
Instructions
Phase 1: Connect in Lumos- Log in to Smartsheet as a System Admin.
- Find the Smartsheet card in your Lumos integrations (reconnect an existing card or add a new one).
- Click Connect Smartsheet.
- Accept the requested scopes in Smartsheet to finish connecting.