Access
How access is chosen per area, what each level allows, what you can grant, and how to change it later.
A connection has a level in each of nine areas. The level decides which tools the app sees.
Levels
| Level | The app can |
|---|---|
| Off | Not see the area's tools at all. |
| Read | Use the area's read tools. |
| Read and change | Use every tool in the area. Change tools still ask you first in apps that support it. |
Overview and Analytics only ever read, so they offer Off or Read.
Areas
| Area | Holds |
|---|---|
| Overview | get_workspace_overview |
| Library | Search, upload, folders, share links |
| Signatures | Envelopes, drafts, sending, recipients, fields, approvals, obligations, checks |
| Templates | Template actions and placeholders |
| Data rooms | Rooms, contents, links, files, folders, questions |
| File requests | Listing and creating requests |
| Forms | Listing web forms and PowerForms |
| Analytics | Reader engagement |
| Workspace | Branding, notifications, plan and seats |
The three choices on the consent page
- Recommended (pre-selected). Everything you can do, except Workspace stays at Read. An app should not change your plan or branding unless you choose so.
- Read only. Every area you can use, at Read. The app can look but change nothing.
- Choose per area. Set each area yourself.
What you can grant
You can never grant an app more than you can do. Docshark works out the most you may grant in each area from your permissions:
| Area | Read needs | Change needs |
|---|---|---|
| Overview | Any Docshark role | – |
| Library | Any Docshark role | Manage documents or manage links |
| Signatures | Send signatures or view analytics | Send signatures |
| Templates | Manage templates or send signatures | Manage templates |
| Data rooms | Any Docshark role | Manage data rooms |
| File requests | Manage file requests | Manage file requests |
| Forms | Manage templates | Manage templates |
| Analytics | View analytics or send signatures | – |
| Workspace | Any Docshark role | Manage branding, team or billing |
Owners and admins have every permission. An area you cannot use is shown as Off and cannot be turned on.
Checked on every call
The level you chose is a ceiling, not a pass. On every call Docshark checks again:
- that the connection is still live and its sign-in has not expired;
- that you are still a member of the workspace and still have a Docshark role;
- that Mako is still on for the workspace;
- that the tool's area allows it at this level;
- that your current permissions open the tool;
- and, inside the tool, the same checks the Docshark app makes for that action.
If you lose your role or leave the workspace, the connection is ended the next time the app calls, and the app has to ask you to sign in again.
Changing access later
Open Settings → Connectors in Docshark. Each connected app shows its access. Pick a different level, and the change applies to the app's next call. You do not need to reconnect.
One workspace per connection
A connection covers the workspace you picked when you allowed it. The app cannot reach your other workspaces through it. To use another workspace, connect again and pick that one. Each connection is listed and disconnected on its own.