Get started: Drive setup guide for admins

Set Drive users' sharing permissions

Next: Stream (or sync) Drive files to users' computers

This article is for administrators. To learn how to share or set permissions for your own files, go to Share files from Google Drive .

Every bit an administrator, you tin control how users in your organization share Google Bulldoze files and folders. These include items from Google Docs, Sheets, Slides, and My Maps as well as folders and anything else stored in Bulldoze.

Before you begin

  • You lot can make the same sharing rules for everyone. Or, gear up different rules for groups or departments. To apply the setting for sure users, put their accounts in an organizational unit (to fix by department) or a configuration group (to ready for users across or within departments).
  • Utilize target audiences to recommend which groups of people users should share with, such every bit departments or teams. For information about setting upwardly target audiences, go to About target audiences.

Note: If Drive is turned off, you can't change file-sharing permissions.

Let users share files outside of your organisation

  1. From the Admin console Abode page, go to Apps and then Google Workspace and then Bulldoze and Docs.

  2. Click Sharing settings and then Sharing options.

  3. To apply the setting to everyone, leave the top organizational unit of measurement selected. Otherwise, select a child organizational unit or a configuration group.

    Supported editions for this characteristic: Business organisation Standard and Concern Plus; Enterprise; Pedagogy Fundamentals, Education Standard, Teaching and Learning Upgrade, and Education Plus; G Suite Concern; Nonprofits; Essentials. Compare your edition

  4. For Sharing exterior of your organization , click On and choose sharing options:

    • For files endemic by users in your organization , warn when sharing outside of your organization —To protect confidentiality, users get a warning when they attempt to share outside of your organization.
    • Let users in your organisation to send invitations to non-Google accounts outside your organization —Users can share files with people who don't use Google Accounts.
      Notation: To edit or comment on files, users must sign in to a Google Account (or a visitor account if you have visitor sharing turned on).
    • When sharing outside of your system is allowed, users in your system can make files and published web content visible to anyone with the link .

  5. Click Save. If y'all configured an organizational unit of measurement or group, you might be able to Inherit or Override a parent organizational unit of measurement, or Unset a group.

Information technology can take upwards to 24 hours for changes to appear. During this time, older and newer settings might be intermittently enforced.

Restrict sharing to sure domains

Supported editions for this feature: Business Standard and Business organisation Plus; Enterprise; Education Fundamentals, Education Standard, Teaching and Learning Upgrade, and Education Plus; Thou Suite Business; Essentials. Compare your edition

You can restrict file sharing to trusted (immune) domains. When you employ an allowlist to restrict sharing:

  • The domain must be a Google Workspace domain unless y'all're using visitor sharing.
  • Users can't share files with personal accounts.
  • If your organization has a mix of Cloud Identity and Google Workspace licenses, domains on an allowlist configuration for Google Workspace users also utilize to users with Cloud Identity licenses.

To set allowlist settings:

  2. From the Admin panel Dwelling page, go to Apps and then Google Workspace and then Drive and Docs.

  3. Click Sharing settings and then Sharing options.

  4. To apply the setting to everyone, get out the top organizational unit selected. Otherwise, select a child organizational unit or a configuration group.

    Supported editions for this feature: Business Standard and Concern Plus; Enterprise; Education Fundamentals, Educational activity Standard, Education and Learning Upgrade, and Education Plus; G Suite Business; Nonprofits; Essentials. Compare your edition

  5. For Sharing exterior of your arrangement , click Allowlisted Domains and choose sharing options:
    • For files owned by users in your arrangement , warn when sharing with users in allowlisted domains—To protect confidentiality, users become a alarm when trying to share files with users in a domain on an allowlist.
    • Allow users in your organization to receive files from users outside of allowlisted domains—Users can open up files from domains that aren't on an allowlist and edit Google Docs, Sheets, and Slides stored on third-party storage systems.
    • Permit users in your arrangement to transport invitations to not-Google accounts outside your organization —Allows Pivot-verified visitor sharing to non-Google users in domains on your allowlist.
  6. Click Save. If you configured an organizational unit or group, you lot might be able to Inherit or Override a parent organizational unit of measurement, or Unset a group.

Information technology tin take upwardly to 24 hours for changes to appear. During this time, older and newer settings might be intermittently enforced.

Restrict all file sharing outside of your organisation

Supported editions for this characteristic: Business concern Standard and Business concern Plus; Enterprise; Education Fundamentals, Educational activity Standard, Teaching and Learning Upgrade, and Educational activity Plus; G Suite Business; Essentials. Compare your edition

You lot can restrict users from sharing or receiving the post-obit items outside of your arrangement:

  • Invitations to items in Docs, Sheets, and Slides, which are agile for 14 days
  • Links to files stored in Drive
  • Email attachments that users can send or receive, uploaded directly from devices and stored in Drive

To restrict file sharing outside of your arrangement:

  2. From the Admin panel Home page, go to Apps and then Google Workspace and then Drive and Docs.

  3. Click Sharing settings and then Sharing options.

  4. To employ the setting to everyone, leave the meridian organizational unit selected. Otherwise, select a child organizational unit or a configuration group.

    Supported editions for this characteristic: Business Standard and Business Plus; Enterprise; Education Fundamentals, Pedagogy Standard, Pedagogy and Learning Upgrade, and Pedagogy Plus; One thousand Suite Business concern; Nonprofits; Essentials. Compare your edition

  5. For Sharing exterior of your system , click Off.
  6. (Optional) To keep users from opening or editing files from outside of your organization or in 3rd-party storage systems, uncheck the Permit users in your organisation to receive files from users outside of your arrangement box.
    Note: If you set a policy that restricts external users from accessing your system's data, users can share files with a group that has external users, only those users can't access the files.
  7. Click Save. If you configured an organizational unit of measurement or group, yous might be able to Inherit or Override a parent organizational unit, or Unset a group.

Information technology tin can take up to 24 hours for changes to appear. During this fourth dimension, older and newer settings might be intermittently enforced.

Command how users share links to files

Supported editions for this characteristic: Business concern Standard and Business Plus; Enterprise; Didactics Fundamentals, Didactics Standard, Teaching and Learning Upgrade, and Teaching Plus; Yard Suite Business; Essentials. Compare your edition

You lot can control the options that users go when they try to share links to files from My Drive. The options do not apply to files and folders in shared drives.

Cloud Identity customers: If your organisation has a mix of Cloud Identity and Google Workspace licenses, the link-sharing setting for the Google Workspace users also applies to the users with Cloud Identity licenses.

  2. From the Admin console Home page, go to Apps and then Google Workspace and then Drive and Docs.

  3. Click Sharing settings.
  4. To apply the setting to everyone, leave the top organizational unit selected. Otherwise, select a child organizational unit of measurement or a configuration group.

    Supported editions for this characteristic: Business concern Standard and Business Plus; Enterprise; Education Fundamentals, Instruction Standard, Education and Learning Upgrade, and Teaching Plus; G Suite Business; Nonprofits; Essentials. Compare your edition

  5. Click Link sharing default.
  6. Choose an choice:
    • Off—But the file owner and people the owner has shared the file with can access the file.
    • On - Anyone at your system with the link—Anyone in your arrangement who has the link tin can admission the file. Files with this visibility don't usually announced in search results unless there are links to them from other files that are searchable.
    • On - Anyone at your organisation —Anyone in your organization tin search for and view the file. All the same, a file with this visibility appears in a user's Drive only after they admission the file or the file is shared with them.
      Of import: If you lot set up a target audition for the sharing settings rather than anyone at your organization, the target audience options show instead.
  7. Click Salve. If y'all configured an organizational unit or group, you might be able to Inherit or Override a parent organizational unit, or Unset a grouping.

Information technology can have up to 24 hours for changes to announced.

Restrict the access levels users can give to files

Supported editions for this feature: Business Standard and Business Plus; Enterprise; Education Fundamentals, Didactics Standard, Didactics and Learning Upgrade, and Education Plus; G Suite Business concern; Essentials. Compare your edition

Yous tin decide what level of access users tin give to files when they are  prompted to share a file. Users get prompted to share when they:

  • Send Gmail or Google Chat messages with links to files that haven't been shared with recipients.
  • +mention someone in a comment in a file who doesn't have admission.
  • Attach files to Google Calendar events where guests don't have admission to the files.

If users share files they don't own, the sharing options come from the file possessor's organizational unit. If users share multiple files and unlike organizational unit settings apply, the options come from the least permissive organizational unit of measurement.

To assign the level of access users tin give:

  2. From the Admin console Habitation page, go to Apps and then Google Workspace and then Bulldoze and Docs.

  3. Click Sharing settings.
  4. To utilize the setting to everyone, get out the elevation organizational unit selected. Otherwise, select a kid organizational unit or a configuration grouping.

    Supported editions for this feature: Business Standard and Business Plus; Enterprise; Pedagogy Fundamentals, Education Standard, Teaching and Learning Upgrade, and Instruction Plus; G Suite Business; Nonprofits; Essentials. Compare your edition

  5. Click Sharing options.
  6. For Access Checker, cull an option:
    • Recipients only, your organization , or public—Users can give admission to anyone who has the link. The least restrictive setting, it's bachelor only if sharing is turned on for your organization and you permit users to publish files on the spider web.
    • Recipients only or your organization —Users can give access to required recipients and anyone in your arrangement who has the link.
    • Recipients but—Users can simply give access to required recipients. If the file has been shared with other people, they still have access. This is the near restrictive setting.
  7. Click Salve. If you configured an organizational unit or group, you might be able to Inherit or Override a parent organizational unit, or Unset a group.

It can take up to 24 hours for changes to appear.

Control who can access files stored on shared drives

Supported editions for this feature: Business organisation Standard and Concern Plus; Enterprise; Education Fundamentals, Education Standard, Pedagogy and Learning Upgrade, and Education Plus; G Suite Business organization; Essentials. Compare your edition

Yous can control who can move files and folders exterior of your organization when moving content from:

  • A shared drive in your system to a shared drive owned past another organization or someone'south My Bulldoze in another system
  • Someone's My Drive in your organization to a shared bulldoze owned by another system

For details on controlling who can access files stored on shared drives, become to Control sharing for your organization.

Related topics

  • How Drive protects your privacy & keeps you in control
  • Allow users to create shared drives
  • Set target audiences for a Google service
  • Add an organizational unit
  • Move users to an organizational unit

Was this helpful?

How tin we better information technology?