> ## Documentation Index
> Fetch the complete documentation index at: https://docs.iru.com/llms.txt
> Use this file to discover all available pages before exploring further.

# Smartsheet

> Connect Smartsheet to Iru Compliance with a read-only API access token to collect user and license inventory, sheet sharing permissions, and workspace membership.

### About Smartsheet

Iru reads **users with their license types**, **sheets with their sharing permissions**, **workspaces with member access**, and **groups** from the Smartsheet API. Authentication uses an **API access token** generated under **Account** → **Personal Settings** → **API Access**. Requests target `https://api.smartsheet.com/2.0`; there is no subdomain to configure.

Iru reads **sharing and access configuration**, not sheet contents. It collects who each sheet is shared with, not the cell data inside.

### How It Works

```http theme={null}
Authorization: Bearer YOUR_ACCESS_TOKEN
```

Smartsheet authenticates with a **Bearer** token. Tokens are generated per user and carry that user's **effective access**, with no separate per-endpoint scopes. Sheets and workspaces are shared individually, so a token from a user who is not a member of a workspace returns nothing for it. Iru cannot tell that apart from a workspace that has no sharing to report.

Generate the token from a **System Admin** account for the most complete user and license inventory.

| Detail             | Value                     |
| ------------------ | ------------------------- |
| **Category**       | Project management        |
| **Authentication** | Bearer (API access token) |

Official references: [API overview](https://smartsheet.redoc.ly/), [Authentication and access tokens](https://smartsheet.redoc.ly/#section/Security/Authentication-and-Access-Tokens).

### Prerequisites

* An account that can generate an API access token. Prefer **System Admin** so user and license inventory is complete.
* Access to every workspace you expect evidence from. Smartsheet access is per object.
* Decide which workspaces are in scope. Excluded workspaces produce no evidence.

### Connect Smartsheet to Iru

<Tabs>
  <Tab title="Smartsheet">
    <Note>
      Complete this tab before you connect the source in Compliance.
    </Note>

    <Steps>
      <Step title="Sign in to Smartsheet">
        Sign in to Smartsheet with the account whose access the integration should inherit, ideally a **System Admin**.
      </Step>

      <Step title="Open Personal Settings">
        Select **Account** (your avatar, lower left), then **Personal Settings**.
      </Step>

      <Step title="Open API Access">
        Select **API Access**.
      </Step>

      <Step title="Generate a new access token">
        Select **Generate new access token**.
      </Step>

      <Step title="Name and copy the token">
        Enter a name such as **Iru Compliance** so you can identify this token later. Copy the token value **once** while Smartsheet displays it. It cannot be retrieved afterward. If you lose it, generate a replacement.
      </Step>
    </Steps>

    <Note>
      Continue on the [**Iru Compliance**](#iru-compliance) tab.
    </Note>
  </Tab>

  <Tab title="Iru Compliance">
    <Note>
      Finish the [**Smartsheet**](#smartsheet) tab first.
    </Note>

    <Steps>
      <Step title="Open Sources">
        In Iru Compliance, on the left navigation bar, expand **Compliance** and select **Sources**.

        <Frame>
          <img src="https://mintcdn.com/iru/tI0HDLDwHj8r9Ile/assets/media/images/iru-navigation-compliance-sources.png?fit=max&auto=format&n=tI0HDLDwHj8r9Ile&q=85&s=87dcef15fc17d2fb9a6e53f454e41710" alt="Left navigation: Compliance expanded, Sources selected" width="410" height="1024" data-path="assets/media/images/iru-navigation-compliance-sources.png" />
        </Frame>
      </Step>

      <Step title="Turn on Smartsheet">
        Find **Smartsheet** (use **Category** or **Search by name or description**). On that card, turn on the **toggle**. A browser tab or window may open for the connector wizard.
      </Step>

      <Step title="Paste the Bearer token">
        Paste the token into the **Bearer** field.
      </Step>

      <Step title="Finish the connection">
        Click **Submit Bearer Token**. When the connection succeeds, the wizard shows **Connection Configured**.
      </Step>

      <Step title="Confirm the source is Active">
        Close the **Iru is requesting access to external services** browser tab, then return to **Compliance** → **Sources** and confirm the **Smartsheet** card is **Active**.
      </Step>
    </Steps>
  </Tab>
</Tabs>

### Troubleshooting

<AccordionGroup>
  <Accordion title="Nothing opens when you turn the source on">
    Check **pop-up blocker** settings for the Iru site and try again.
  </Accordion>

  <Accordion title="Authentication fails">
    Regenerate the token and paste the full string. Smartsheet does not let you view an existing token, so a partial copy cannot be checked after the fact.
  </Accordion>

  <Accordion title="A workspace or sheet is missing">
    The token's owner is not shared into it. Regenerate the token from a **System Admin** account, or share the in-scope workspaces with the account you used.
  </Accordion>

  <Accordion title="User list looks short">
    A non-admin token returns only the users it can see. Use a System Admin token for complete user and license inventory.
  </Accordion>

  <Accordion title="Sheet contents are not appearing">
    This is expected. Iru collects sharing and access configuration, not cell data.
  </Accordion>
</AccordionGroup>

### Related Articles

<CardGroup cols={2}>
  <Card title="Sources Management" icon="plug" href="/en/compliance/sources-management">
    Browse and manage every Compliance source.
  </Card>

  <Card title="Getting Started With Compliance" icon="rocket" href="/en/compliance/getting-started-with-compliance">
    Frameworks, actions, and **Artifacts**.
  </Card>

  <Card title="Iru Overview" icon="layer-group" href="/en/iru/platform-overview/iru-overview">
    How Endpoint, Compliance, and Identity fit together.
  </Card>

  <Card title="Artifacts Management" icon="folder-open" href="/en/compliance/artifacts-management">
    Upload, review, and organize evidence from sources and actions.
  </Card>
</CardGroup>