Users
LICENSE AUDIT Score and right-size paid seats.Drop your Seat Type Report CSV here
or click to browse — export from Smartsheet Admin → Reports → Seat Type
Last Activity (UTC) · Last Paid Activity (UTC) · # of Edits (Last 365 days) · # of Created Assets (Last 365 days) · # of Comments (Last 365 days)
Select a group
Pick a group from the list on the left to view members or run a domain-based sync.
Inventory
Select an asset
Click any workspace, folder, sheet, report, or dashboard in the tree to see its metadata, IDs, and (for sheets) column structure.
Sharing risk
Read-only asset exposure snapshot from the shared inventory model. Deep per-sheet sharing scans will plug into this tab later.
GET /events endpoint is gated behind the Event Reporting add-on
(Business and Enterprise plans). On plans without it, the endpoint returns
403 Forbidden and queries here will fail.
The section and its UI are kept ready so it can be used immediately if Event Reporting is added to your plan in the future.
Filters
GET /events is paginated; the portal walks streamPosition until Max events is reached.
Smartsheet retains audit events for ~7 days; anything older isn't accessible via this API.
Portal activity
Server-side record of write operations started from this portal. This complements Smartsheet Event Reporting and keeps portal actions visible even when Event Reporting is not enabled.
Endpoint health tester
Probes every Smartsheet API endpoint the portal calls. Read endpoints fire a real call;
write endpoints fire a deliberately-invalid call against a fake id and treat any Smartsheet
error code response as a healthy endpoint (proves the route exists). 404 with no
errorCode field means the endpoint is missing — either deprecated or renamed.
Color key: OK WARN FAIL SKIP
Connection
Token lives in browser memory for this session only — unless you opt in to encrypted save below. Organization name and validated domains are saved on this machine (browser localStorage, pinned to port 8765) so they persist across launches. Plan ID is saved only if you check the "Remember" box.
Access diagnostics
Role, plan, and feature visibility checks for the current connection.
Appearance
Choose the portal theme for this browser. This setting is local to this machine.
Saved settings
Organization name, validated domains, and auto-sync groups are always saved on this machine. Plan ID and API token are saved only when you check the corresponding "Remember" box above. Token is encrypted via Windows DPAPI (tied to this Windows user account).