IMPORTRANGE requires an explicit connection between a source and destination spreadsheet. Review that connection’s exposure before clicking Allow access.
Verify both file identities
Check the source URL, the intended range, and the destination’s owner and editors. A first-time #REF! prompt asking to connect sheets is different from a malformed range or a blocked array output.
If you cannot open the source with the intended account, request access from its owner through the normal process. Do not make the source public as a shortcut.
Understand the destination’s capability
Google states that once the connection is authorized, any editor of the destination can use IMPORTRANGE to pull from any part of the source. The initial formula’s narrow range is not a separate permission boundary.
Therefore, copying one approved column does not make the connection safe for a destination whose editors must not see other source data. Use a separately permissioned, approved export source when a strict subset is required.
Authorize only the intended flow
Grant access only after the source owner and destination audience are appropriate. Check the resulting data and review the destination’s sharing again. Keep sensitive fields out of unnecessary intermediate files.
Google documents that this access remains until the granting user is removed from the source. Removing a visible formula should not be treated as proof that all destination capabilities or previously copied values disappeared. Review the actual authorization and retained outputs when access needs to be withdrawn. A working connection establishes a data path; it does not establish permission to redistribute the resulting records.
References
Reviewed against the linked official product guidance on November 3, 2026. Features, limits, screen labels, and access can vary by account, platform, region, and organization policy.