> ## Documentation Index
> Fetch the complete documentation index at: https://docs.lumos.com/llms.txt
> Use this file to discover all available pages before exploring further.

# Smartsheet

## After this article

You will be able to connect Smartsheet to Lumos to sync users, their roles, and last login. You can also deprovision, downgrade, or transfer users' data during offboarding.

## Capabilities

| Functionality | Type | Sync | Provision | Description |
| - | - | - | - | - |
| Users | Account | Yes | Yes | User accounts. Status mapping: ACTIVE → Active, DECLINED → Deprovisioned, DEACTIVATED → Suspended, no longer returned → Deprovisioned. Last login synced from the user's `lastLogin` field |
| Roles | Permission | Yes | Yes | Smartsheet Administrator, Licensed Sheet Creator, Group Administrator, Resource Viewer (from the `admin`, `licensedSheetCreator`, `groupAdmin`, `resourceViewer` fields) |

| Deprovisioning Action | Type | AppStore | Offboarding | Access Reviews | License Management | Description |
| - | - | - | - | - | - | - |
| Deprovision | User | N/A | Yes | Yes | Yes | Removes the user from your organization account. They become a free collaborator with read-only access to their owned items (unless transferred). Reclaims a license. Lumos marks the account **Deprovisioned** |
| Downgrade license | User | N/A | Yes | No | Yes | Removes the **Licensed Sheet Creator** and **Resource Viewer** roles. If data is transferred during the downgrade, **Group Admin** is also removed and the recipient becomes admin of those groups. Reclaims a license |
| Transfer data | User | N/A | Yes | No | No | Transfers owned reports, sheets, Sights, workspaces, and shared templates to another user. Only executed with **Deprovision Account** or **Downgrade License** during Offboarding |

## Required plan and roles

* **Smartsheet plan:** no minimum plan is required.
* **Smartsheet role:** the connecting user must be a **System Admin**.
* **OAuth scopes** requested during setup (both default):
  * `ADMIN_USERS`: add and remove users from your Smartsheet organization account, plus create groups and manage membership. Required for deprovisioning, downgrades, and data transfer.
  * `READ_USERS`: retrieve users and groups for your Smartsheet organization account.
* **Permission scoping:** there is no read-only variant. Both scopes are requested in the OAuth grant.

## Read-only access vs provisioning

**Is read-only possible?** No. Smartsheet's OAuth grant always requests both `ADMIN_USERS` and `READ_USERS` together, and there's no read-only variant of the connection.

**What full provisioning requires.** A System Admin completing the OAuth connection and accepting both requested scopes, which together enable deprovisioning, license downgrades, and data transfer. Follow the steps below.

**Watch out for.** Because both scopes are always requested, you can't grant Lumos visibility into Smartsheet without also granting it the ability to deprovision, downgrade, or transfer users' data. Deprovisioned users become free collaborators with read-only access to their own items unless their data was transferred first.

## Instructions

**Phase 1: Connect in Lumos**

1. Log in to Smartsheet as a System Admin.
2. Find the Smartsheet card in your Lumos integrations (reconnect an existing card or add a new one).
3. Click **Connect Smartsheet**.
4. Accept the requested scopes in Smartsheet to finish connecting.

## API Endpoints Used

<Note>
  The API endpoints this integration uses are available to logged-in Lumos customers. [Log in](/login) to view them.
</Note>

## Troubleshooting

**I cannot connect the Smartsheet integration.** Ensure you are logged into Smartsheet as a **System Admin** when accepting the OAuth prompt.

**Licensed Sheet Creator role missing in Lumos.** If a user holds the Licensed Sheet Creator role but their Smartsheet status is Declined or Deactivated, the role does not appear in Lumos.

**Data transfer during Access Reviews.** Downgrade and Transfer data are not supported in Access Reviews (Transfer data is also unsupported in License Management). Trigger data transfer through an Offboarding workflow with the Deprovision Account or Downgrade License option. Verify the transfer target is set correctly before running, since the workflow does not otherwise prompt for one.

**Deprovisioned user still sees their sheets.** Expected: removal converts the user to a free collaborator with read-only access to items they owned, unless you transferred that data during deprovisioning.