​@Sam King  - ​@BenHallLaw recently started a discussion on this.

Ben proposed: “to see access restrictions to prevent logins from unknown computers which would effectively make it so staff can only login from approved devices (i.e. firm computers).”

I proposed:

• Only allow login from certain IP addresses. This would be useful if your law firm has one or more static IPs.
• Employee access control could be set in different ways depending on need:
  • Access Location: Anywhere, Static IP (desktop only), Static IP (Desktop and mobile).
  • Export: Off, only cases where responsible, All
  • Deletion: Off, only cases where responsible, All

I’m definitely interested in this. 

We need to be able to restrict access from only approved devices. We want to eliminate access from a personal device or one that has not been approved. Restrictions based on IP addresses could work but it seems that could pose a problem for remote work. Even when I go on vacation, I still log into the system and check things. 

I should be able to designate roles to get Firm Insights. My operations manager is my #2 and she needs this data.

I’ve discussed this with several Smokeballers previously, but I find it baffling that I am not able to set permissions and lock out the ability to edit firm settings.  The response I got during onboarding was that SB support would be able to go in and see who made what changes and when, but regardless if it was done in error or malice, what good does that do if we still have to spend time fixing, resetting, or cleaning up anything that was changed?

I had no idea any user can change firm settings! That is COMPLETELY UNACCEPTABLE!!!!!!!!!!!!!

I’d like the ability to set permissions when I share documents to other attorneys and mediators using the the messenger / share as secure file link. Specifically, I’d like to be able to set:

-passwords

-expiration date

-# of times a file or folder can be accessed