If you are an account owner, account admin, or Shield admin on an account with Enterprise Shield and looking to leverage classification controls, refer to the Lucid admin panel: Compliance settings article for set up instructions. The purpose of this post will be to share the user experience based on the classification controls that are placed on their document(s).
What are classification controls?
Lucid’s classification controls are part of our Enterprise Shield add-on and provide advanced protection of sensitive information on your account. These controls enforce restrictions, such as disabling external sharing, exporting, or printing—based on a document’s assigned classification.
Note: While we’ve made every effort to disable these actions within the Lucid products, we cannot control sharing activities that occur outside the platform, such as through screenshots or other external methods.
How are controls applied?
When an admin maps a control to a classification, any document with that classification applied will also have the control applied. Document integrations such as Confluence, Google Slides, SharePoint, etc., are not affected by these controls.
For the following example, any documents with the Internal classification set on a document will have the “disable publish” control applied to that document. Meaning, any Internal classified document cannot be published.
Note: Classification controls do not apply to rolled-up fields within our accelerators. They also do not apply to insights displayed on dashboards for accelerator managers.
How do these controls work?
Disable publish
When the Disable publish control is mapped to a classification, documents with that classification will have publishing and embedding blocked. Users attempting to publish or embed will see the message: “Publish is disabled due to the document’s classification.” or “Embed is disabled due to this document’s classification.”
Note: This control disables public publishing, but internal publishing of repositories or blueprints with Lucid Accelerators is still available.
Disable external sharing
Applying the Disable external shares classification control blocks all future external sharing and immediately revokes access for any external user who already had access to the classified document. While previously added external users may still appear as collaborators, they will no longer be able to access the document. To fully remove them, use the revoke external sharing permission for specific documents via Discovery. Sharing the classified document with internal users (i.e., users within your organization) will still be permitted.
When the control is applied to a classification, users trying to share a document via email with an external user will see “This document’s classification settings don’t allow invitations to external collaborators. Emails highlighted in red will not be invited.”
Users will also be blocked from sharing documents via links when disable external shares is applied. This restriction applies to both “anyone with the link” and “any logged-in user” options. If a user attempts to generate a share link, they’ll see the message: “External shares are disabled due to this document’s classification.”
Disable print
Applying the Disable print control to a classification prevents printing of a document from within Lucid. Users will see: “Printing is disabled due to the document’s classification.” If a user tries to use a hot key (such as ⌘P, CTRL+P), it will be blocked and they will see an error message.
Disable export
When the Disable export control is applied to a classification, documents with that classification will block exporting. Users attempting to export will see the message: “Export is disabled due to the document’s classification.” Users are also unable to export selected elements on the document, such as a sticky note or shape.
Disable replication
Disabling replication is a control for preventing data exfiltration, and it has a significant impact on users. The control blocks the ability to copy classified documents and their content, preventing users from copying content or moving it to other Lucid documents.
When a classification has the Disable replication control applied, any document with that classification cannot be replicated within Lucid. Any action that would replicate the content of the document into another location (such as “Convert to template”) is blocked. Users will be blocked from actions such as:
- Copying a document from the editor or from the Documents page
- Convert to template
- Convert to corporate template
- Copy (including hot keys such as ⌘C, CTRL+C)
- Cut (including hot keys such as ⌘X, CTRL+X)
- Note: You can still use the Duplicate command (⌘D, CTRL+D) to replicate content within the same Lucid document.
- Export to Lucidspark (if currently a Lucidchart document)
- Export to Lucidchart (if currently a Lucidspark document)
- Revision history “New from version”
- New document from page
Note: This is not an exhaustive list of all replication that is prevented by this control.
Note: We honor classification controls for documents in a repository. However, all documents—even those with the Disable replication control applied—can be replicated when a user suggests edits.
