Get started: Drive setup guide for admins

Set Drive users' sharing permissions

Next: Stream (or sync) Drive files to users' computers

This article is for administrators. To learn how to share or set permissions for your own files, go to Share files from Google Bulldoze .

As an administrator, yous can control how users in your organization share Google Drive files and folders. These include items from Google Docs, Sheets, Slides, and My Maps likewise as folders and anything else stored in Drive.

Before yous brainstorm

  • You lot can brand the same sharing rules for anybody. Or, set different rules for groups or departments. To apply the setting for certain users, put their accounts in an organizational unit (to gear up by department) or a configuration grouping (to set for users across or within departments).
  • Use target audiences to recommend which groups of people users should share with, such as departments or teams. For information nigh setting up target audiences, get to Most target audiences.

Notation: If Drive is turned off, you tin't change file-sharing permissions.

Let users share files outside of your arrangement

  1. From the Admin panel Dwelling page, get to Apps and then Google Workspace and then Drive and Docs.

  2. Click Sharing settings and then Sharing options.

  3. To apply the setting to anybody, leave the top organizational unit selected. Otherwise, select a child organizational unit or a configuration group.

    Supported editions for this characteristic: Business concern Standard and Concern Plus; Enterprise; Education Fundamentals, Education Standard, Teaching and Learning Upgrade, and Education Plus; M Suite Business organisation; Nonprofits; Essentials. Compare your edition

  4. For Sharing outside of your organisation , click On and choose sharing options:

    • For files owned by users in your organization , warn when sharing outside of your organization —To protect confidentiality, users get a alarm when they try to share outside of your organization.
    • Allow users in your organisation to ship invitations to non-Google accounts outside your arrangement —Users tin can share files with people who don't utilise Google Accounts.
      Note: To edit or annotate on files, users must sign in to a Google Account (or a visitor account if you have company sharing turned on).
    • When sharing outside of your arrangement is allowed, users in your system can brand files and published web content visible to anyone with the link .

  5. Click Save. If you configured an organizational unit of measurement or grouping, you might exist able to Inherit or Override a parent organizational unit, or Unset a grouping.

Information technology can take upward to 24 hours for changes to announced. During this fourth dimension, older and newer settings might be intermittently enforced.

Restrict sharing to certain domains

Supported editions for this feature: Business Standard and Business organization Plus; Enterprise; Education Fundamentals, Didactics Standard, Teaching and Learning Upgrade, and Teaching Plus; G Suite Business; Essentials. Compare your edition

You can restrict file sharing to trusted (immune) domains. When you lot employ an allowlist to restrict sharing:

  • The domain must be a Google Workspace domain unless you're using visitor sharing.
  • Users can't share files with personal accounts.
  • If your arrangement has a mix of Cloud Identity and Google Workspace licenses, domains on an allowlist configuration for Google Workspace users also utilize to users with Cloud Identity licenses.

To set allowlist settings:

  2. From the Admin console Home folio, become to Apps and then Google Workspace and then Drive and Docs.

  3. Click Sharing settings and then Sharing options.

  4. To apply the setting to everyone, leave the summit organizational unit selected. Otherwise, select a child organizational unit or a configuration group.

    Supported editions for this characteristic: Business concern Standard and Business concern Plus; Enterprise; Education Fundamentals, Teaching Standard, Didactics and Learning Upgrade, and Education Plus; G Suite Business; Nonprofits; Essentials. Compare your edition

  5. For Sharing outside of your organization , click Allowlisted Domains and cull sharing options:
    • For files owned by users in your organization , warn when sharing with users in allowlisted domains—To protect confidentiality, users get a warning when trying to share files with users in a domain on an allowlist.
    • Let users in your organization to receive files from users exterior of allowlisted domains—Users can open up files from domains that aren't on an allowlist and edit Google Docs, Sheets, and Slides stored on third-party storage systems.
    • Let users in your organization to send invitations to non-Google accounts outside your organisation —Allows PIN-verified company sharing to non-Google users in domains on your allowlist.
  6. Click Save. If you lot configured an organizational unit or group, you might exist able to Inherit or Override a parent organizational unit, or Unset a group.

It can take up to 24 hours for changes to announced. During this fourth dimension, older and newer settings might be intermittently enforced.

Restrict all file sharing outside of your system

Supported editions for this characteristic: Business Standard and Concern Plus; Enterprise; Pedagogy Fundamentals, Education Standard, Teaching and Learning Upgrade, and Instruction Plus; One thousand Suite Business organization; Essentials. Compare your edition

You tin restrict users from sharing or receiving the post-obit items outside of your organization:

  • Invitations to items in Docs, Sheets, and Slides, which are active for 14 days
  • Links to files stored in Bulldoze
  • Email attachments that users can transport or receive, uploaded direct from devices and stored in Drive

To restrict file sharing outside of your organization:

  2. From the Admin panel Home page, go to Apps and then Google Workspace and then Bulldoze and Docs.

  3. Click Sharing settings and then Sharing options.

  4. To utilize the setting to everyone, exit the top organizational unit of measurement selected. Otherwise, select a child organizational unit or a configuration group.

    Supported editions for this feature: Business Standard and Business Plus; Enterprise; Instruction Fundamentals, Education Standard, Teaching and Learning Upgrade, and Education Plus; Yard Suite Concern; Nonprofits; Essentials. Compare your edition

  5. For Sharing outside of your organization , click Off.
  6. (Optional) To keep users from opening or editing files from outside of your organization or in third-party storage systems, uncheck the Allow users in your organization to receive files from users outside of your organisation box.
    Note: If you ready a policy that restricts external users from accessing your organization'due south information, users can share files with a group that has external users, but those users can't admission the files.
  7. Click Save. If yous configured an organizational unit of measurement or group, you might be able to Inherit or Override a parent organizational unit, or Unset a grouping.

It can take upwardly to 24 hours for changes to appear. During this time, older and newer settings might be intermittently enforced.

Control how users share links to files

Supported editions for this feature: Business Standard and Business concern Plus; Enterprise; Didactics Fundamentals, Teaching Standard, Education and Learning Upgrade, and Education Plus; Thousand Suite Business; Essentials. Compare your edition

Y'all can control the options that users get when they try to share links to files from My Drive. The options do non use to files and folders in shared drives.

Deject Identity customers: If your organization has a mix of Cloud Identity and Google Workspace licenses, the link-sharing setting for the Google Workspace users also applies to the users with Cloud Identity licenses.

  2. From the Admin panel Home page, get to Apps and then Google Workspace and then Bulldoze and Docs.

  3. Click Sharing settings.
  4. To apply the setting to everyone, get out the top organizational unit of measurement selected. Otherwise, select a child organizational unit or a configuration group.

    Supported editions for this characteristic: Business Standard and Business Plus; Enterprise; Educational activity Fundamentals, Pedagogy Standard, Instruction and Learning Upgrade, and Education Plus; G Suite Business concern; Nonprofits; Essentials. Compare your edition

  5. Click Link sharing default.
  6. Choose an choice:
    • Off—Only the file owner and people the owner has shared the file with can access the file.
    • On - Anyone at your organization with the link—Anyone in your system who has the link can access the file. Files with this visibility don't normally appear in search results unless there are links to them from other files that are searchable.
    • On - Anyone at your organization —Anyone in your organization tin search for and view the file. Even so, a file with this visibility appears in a user's Drive only after they access the file or the file is shared with them.
      Important: If yous ready a target audience for the sharing settings rather than anyone at your organization, the target audition options show instead.
  7. Click Save. If you configured an organizational unit of measurement or group, you might be able to Inherit or Override a parent organizational unit, or Unset a group.

It can have upward to 24 hours for changes to announced.

Restrict the admission levels users tin can requite to files

Supported editions for this feature: Business Standard and Business Plus; Enterprise; Education Fundamentals, Didactics Standard, Teaching and Learning Upgrade, and Education Plus; M Suite Business; Essentials. Compare your edition

You tin determine what level of access users can give to files when they are  prompted to share a file. Users get prompted to share when they:

  • Send Gmail or Google Chat messages with links to files that haven't been shared with recipients.
  • +mention someone in a comment in a file who doesn't have access.
  • Adhere files to Google Calendar events where guests don't accept admission to the files.

If users share files they don't own, the sharing options come from the file possessor'south organizational unit of measurement. If users share multiple files and different organizational unit settings utilise, the options come from the least permissive organizational unit.

To assign the level of access users can give:

  2. From the Admin console Home page, become to Apps and then Google Workspace and then Drive and Docs.

  3. Click Sharing settings.
  4. To apply the setting to everyone, leave the height organizational unit selected. Otherwise, select a child organizational unit or a configuration grouping.

    Supported editions for this feature: Business Standard and Business Plus; Enterprise; Education Fundamentals, Educational activity Standard, Teaching and Learning Upgrade, and Instruction Plus; G Suite Concern; Nonprofits; Essentials. Compare your edition

  5. Click Sharing options.
  6. For Access Checker, choose an option:
    • Recipients only, your organization , or public—Users can give access to anyone who has the link. The least restrictive setting, it'due south available only if sharing is turned on for your system and you permit users to publish files on the web.
    • Recipients only or your organisation —Users tin requite access to required recipients and anyone in your organization who has the link.
    • Recipients only—Users can only give access to required recipients. If the file has been shared with other people, they all the same have access. This is the near restrictive setting.
  7. Click Save. If you configured an organizational unit or grouping, you might be able to Inherit or Override a parent organizational unit, or Unset a group.

Information technology can take up to 24 hours for changes to appear.

Control who can admission files stored on shared drives

Supported editions for this feature: Business Standard and Business Plus; Enterprise; Education Fundamentals, Educational activity Standard, Teaching and Learning Upgrade, and Education Plus; G Suite Business; Essentials. Compare your edition

Y'all tin control who can move files and folders outside of your organisation when moving content from:

  • A shared drive in your organization to a shared drive owned past another organization or someone's My Drive in another organisation
  • Someone's My Drive in your organisation to a shared bulldoze owned by some other organization

For details on controlling who tin admission files stored on shared drives, go to Control sharing for your arrangement.

Related topics

  • How Drive protects your privacy & keeps you in control
  • Allow users to create shared drives
  • Set up target audiences for a Google service
  • Add an organizational unit of measurement
  • Move users to an organizational unit

Was this helpful?

How can we improve information technology?