How “Use Current Spreadsheet” & drive.file Security Works

Data security and organizational privacy are foundational to Smart Sheet Sync. Unlike traditional synchronization tools that request permission to view, edit, or delete every single file in your Google Drive, Smart Sheet Sync operates strictly under the principle of least privilege.

---

The drive.file OAuth Scope

Smart Sheet Sync relies on the Google-approved https://www.googleapis.com/auth/drive.file scope:

• Selected Files Only: Smart Sheet Sync can only interact with spreadsheets and files that you explicitly open, create, or click via the official Google File Picker.
• Zero Full-Drive Access: The add-on cannot list, read, or see the rest of your private Google Drive or Shared Drives.
• Current Spreadsheet Access: Under spreadsheets.currentonly, the add-on interacts solely with your currently open workbook without exposing other tabs or documents.

---

Why the 1-Click Google Picker Confirmation Appears

When you select an external spreadsheet as a source, Google displays the native Google Picker UI. This modal is rendered directly by Google (not by our servers), granting our application token access only to that individual file ID.

Corporate IT departments and security auditing teams approve Smart Sheet Sync because it eliminates the data leak vulnerabilities inherent in broad-access competitors.