At times, you may need to control access to your Turtl Docs so that only a specific group of people can read your content. Turtl's access control settings provide controls to help you achieve this.
Applying an access control policy
Navigate to the main content listing page and click the drop-down arrow to get to your Doc settings.
Select the Access Control tab.
Select the access policy you want to apply using the drop-down menu. Available policies are:
Public on the web (default for draft Docs): Anyone on the internet can read your Turtl Doc. Indexing is enabled for search engines.
Anyone with the link (default for public Docs): Anyone who has the link can access your Turtl Doc. Search engine indexing will be turned off.
Anyone at my company: With SSO enabled, anyone who has a company SSO can access your Turtl Doc. With no SSO enabled, anyone with a Turtl login can access your Doc. Search engine indexing will be turned off.
Specific people only: Provide a list of people (emails) who can access your Turtl Doc. Search engine indexing will be turned off.
Notes:
If you select Specific people only, individual reader information (PII - personal identifying information) is requested, therefore your company's privacy policy should be set, lest this access setting will not work. Find out how to set this policy here.
If you select Anyone at my company or Specific people only, the PDF download will be removed from the Doc to keep the content from being shared publicly.
Checking that the correct policy is applied
Turtl notifies you of the access settings applied to a Doc in several places to help you avoid sending a Doc out with incorrect settings:
A status banner is shown for each Doc with a restricted access policy in the main content list:
A lock icon is displayed at the top of the browser when an internal user accesses a Private or email-protected Doc. Hovering over this displays more information:
Configuring protection for Docs
The email authentication access policy allows you to specify a list of email addresses that must be used by external users to read your Doc.
How to apply the email authentication policy
Simply add the email addresses in the box shown above. Whole domains can also be added to allow access to everyone in the company, for example, @turtl.co would give access to all people with that domain in their email address.
What does your reader see?
Note: The activation link only remains active for 15 minutes. After this time has expired the reader will need to enter their email address again and click a new activation email.
When "Specific people only" is selected, all external readers will be presented with an access screen requiring them to enter their email address in order to read the Turtl Doc.
If they have been granted access in advance they will be sent an email with a link to the now unlocked Turtl Doc.
You can also control the access settings of your personalized Turtl Docs. Read more about this here.
Tip: If you would like the email activation link to be sent from your own email address, this is available as a professional service. Please email professional-services@turtl.co for further details.