Become started: Bulldoze setup guide for admins

Set Drive users' sharing permissions

Next: Stream (or sync) Drive files to users' computers

This article is for administrators. To learn how to share or set permissions for your ain files, become to Share files from Google Drive .

As an administrator, y'all can control how users in your organization share Google Bulldoze files and folders. These include items from Google Docs, Sheets, Slides, and My Maps likewise as folders and anything else stored in Drive.

Earlier y'all begin

  • You tin can make the same sharing rules for anybody. Or, set different rules for groups or departments. To utilise the setting for certain users, put their accounts in an organizational unit (to set by department) or a configuration group (to set for users across or within departments).
  • Use target audiences to recommend which groups of people users should share with, such equally departments or teams. For data virtually setting upwardly target audiences, go to Nigh target audiences.

Annotation: If Bulldoze is turned off, you tin't modify file-sharing permissions.

Allow users share files exterior of your organization

  1. From the Admin console Home folio, go to Apps and then Google Workspace and then Drive and Docs.

  2. Click Sharing settings and then Sharing options.

  3. To utilise the setting to everyone, leave the top organizational unit selected. Otherwise, select a kid organizational unit or a configuration grouping.

    Supported editions for this feature: Business Standard and Business Plus; Enterprise; Education Fundamentals, Education Standard, Pedagogy and Learning Upgrade, and Educational activity Plus; G Suite Business concern; Nonprofits; Essentials. Compare your edition

  4. For Sharing outside of your organization , click On and choose sharing options:

    • For files owned by users in your organisation , warn when sharing exterior of your organization —To protect confidentiality, users become a alarm when they try to share outside of your organization.
    • Allow users in your organization to transport invitations to non-Google accounts outside your arrangement —Users tin can share files with people who don't use Google Accounts.
      Note: To edit or annotate on files, users must sign in to a Google Account (or a visitor business relationship if you lot take visitor sharing turned on).
    • When sharing outside of your organization is allowed, users in your arrangement can make files and published spider web content visible to anyone with the link .

  5. Click Save. If you configured an organizational unit or group, yous might be able to Inherit or Override a parent organizational unit, or Unset a group.

Information technology tin take upward to 24 hours for changes to appear. During this fourth dimension, older and newer settings might be intermittently enforced.

Restrict sharing to sure domains

Supported editions for this feature: Business concern Standard and Business Plus; Enterprise; Education Fundamentals, Education Standard, Education and Learning Upgrade, and Education Plus; G Suite Business; Essentials. Compare your edition

You can restrict file sharing to trusted (immune) domains. When you use an allowlist to restrict sharing:

  • The domain must exist a Google Workspace domain unless you lot're using visitor sharing.
  • Users can't share files with personal accounts.
  • If your organization has a mix of Cloud Identity and Google Workspace licenses, domains on an allowlist configuration for Google Workspace users likewise apply to users with Cloud Identity licenses.

To set allowlist settings:

  2. From the Admin console Home page, go to Apps and then Google Workspace and then Drive and Docs.

  3. Click Sharing settings and then Sharing options.

  4. To utilize the setting to everyone, leave the superlative organizational unit of measurement selected. Otherwise, select a child organizational unit or a configuration group.

    Supported editions for this feature: Business Standard and Business Plus; Enterprise; Education Fundamentals, Education Standard, Pedagogy and Learning Upgrade, and Didactics Plus; M Suite Business; Nonprofits; Essentials. Compare your edition

  5. For Sharing outside of your organisation , click Allowlisted Domains and cull sharing options:
    • For files owned by users in your organisation , warn when sharing with users in allowlisted domains—To protect confidentiality, users get a warning when trying to share files with users in a domain on an allowlist.
    • Allow users in your arrangement to receive files from users outside of allowlisted domains—Users can open files from domains that aren't on an allowlist and edit Google Docs, Sheets, and Slides stored on third-party storage systems.
    • Let users in your organization to send invitations to non-Google accounts exterior your organisation —Allows Pivot-verified visitor sharing to non-Google users in domains on your allowlist.
  6. Click Save. If you configured an organizational unit or group, you might be able to Inherit or Override a parent organizational unit, or Unset a group.

Information technology tin take up to 24 hours for changes to appear. During this fourth dimension, older and newer settings might be intermittently enforced.

Restrict all file sharing outside of your organization

Supported editions for this feature: Business Standard and Concern Plus; Enterprise; Education Fundamentals, Education Standard, Teaching and Learning Upgrade, and Education Plus; 1000 Suite Concern; Essentials. Compare your edition

You lot tin can restrict users from sharing or receiving the post-obit items outside of your organization:

  • Invitations to items in Docs, Sheets, and Slides, which are active for 14 days
  • Links to files stored in Bulldoze
  • Email attachments that users can send or receive, uploaded direct from devices and stored in Drive

To restrict file sharing outside of your arrangement:

  2. From the Admin console Home page, go to Apps and then Google Workspace and then Drive and Docs.

  3. Click Sharing settings and then Sharing options.

  4. To apply the setting to everyone, leave the top organizational unit selected. Otherwise, select a child organizational unit or a configuration group.

    Supported editions for this feature: Business concern Standard and Concern Plus; Enterprise; Education Fundamentals, Instruction Standard, Educational activity and Learning Upgrade, and Education Plus; Chiliad Suite Business; Nonprofits; Essentials. Compare your edition

  5. For Sharing outside of your organisation , click Off.
  6. (Optional) To keep users from opening or editing files from outside of your organization or in third-party storage systems, uncheck the Permit users in your organization to receive files from users exterior of your organization box.
    Note: If you lot set a policy that restricts external users from accessing your organization'southward information, users can share files with a grouping that has external users, but those users tin't access the files.
  7. Click Salvage. If y'all configured an organizational unit or grouping, you might be able to Inherit or Override a parent organizational unit, or Unset a group.

Information technology tin can take upward to 24 hours for changes to appear. During this time, older and newer settings might be intermittently enforced.

Control how users share links to files

Supported editions for this feature: Concern Standard and Business concern Plus; Enterprise; Education Fundamentals, Education Standard, Didactics and Learning Upgrade, and Education Plus; Thou Suite Business organization; Essentials. Compare your edition

Yous tin can control the options that users go when they try to share links to files from My Drive. The options exercise not apply to files and folders in shared drives.

Cloud Identity customers: If your organisation has a mix of Deject Identity and Google Workspace licenses, the link-sharing setting for the Google Workspace users besides applies to the users with Cloud Identity licenses.

  2. From the Admin console Domicile page, go to Apps and then Google Workspace and then Drive and Docs.

  3. Click Sharing settings.
  4. To apply the setting to everyone, exit the top organizational unit selected. Otherwise, select a kid organizational unit or a configuration group.

    Supported editions for this feature: Business organisation Standard and Business Plus; Enterprise; Education Fundamentals, Education Standard, Teaching and Learning Upgrade, and Teaching Plus; Chiliad Suite Concern; Nonprofits; Essentials. Compare your edition

  5. Click Link sharing default.
  6. Choose an option:
    • Off—Only the file owner and people the owner has shared the file with can access the file.
    • On - Anyone at your system with the link—Anyone in your organization who has the link can admission the file. Files with this visibility don't normally appear in search results unless there are links to them from other files that are searchable.
    • On - Anyone at your organization —Anyone in your organization can search for and view the file. However, a file with this visibility appears in a user's Drive just after they access the file or the file is shared with them.
      Important: If you set a target audience for the sharing settings rather than anyone at your organization, the target audience options prove instead.
  7. Click Salve. If you configured an organizational unit or group, yous might be able to Inherit or Override a parent organizational unit of measurement, or Unset a grouping.

It can take up to 24 hours for changes to appear.

Restrict the access levels users tin can requite to files

Supported editions for this feature: Business Standard and Business Plus; Enterprise; Educational activity Fundamentals, Teaching Standard, Teaching and Learning Upgrade, and Education Plus; M Suite Business; Essentials. Compare your edition

You can determine what level of access users tin requite to files when they are  prompted to share a file. Users get prompted to share when they:

  • Send Gmail or Google Chat messages with links to files that haven't been shared with recipients.
  • +mention someone in a comment in a file who doesn't have admission.
  • Attach files to Google Calendar events where guests don't have access to the files.

If users share files they don't own, the sharing options come from the file possessor'south organizational unit. If users share multiple files and unlike organizational unit settings apply, the options come from the to the lowest degree permissive organizational unit.

To assign the level of admission users can give:

  2. From the Admin console Home folio, get to Apps and then Google Workspace and then Drive and Docs.

  3. Click Sharing settings.
  4. To apply the setting to everyone, get out the top organizational unit selected. Otherwise, select a child organizational unit of measurement or a configuration grouping.

    Supported editions for this characteristic: Business Standard and Business concern Plus; Enterprise; Education Fundamentals, Educational activity Standard, Teaching and Learning Upgrade, and Education Plus; G Suite Business; Nonprofits; Essentials. Compare your edition

  5. Click Sharing options.
  6. For Admission Checker, choose an option:
    • Recipients merely, your system , or public—Users can give access to anyone who has the link. The least restrictive setting, it'due south available merely if sharing is turned on for your system and you let users to publish files on the web.
    • Recipients only or your organization —Users tin give access to required recipients and anyone in your organisation who has the link.
    • Recipients merely—Users tin only give admission to required recipients. If the file has been shared with other people, they however have access. This is the well-nigh restrictive setting.
  7. Click Salve. If you configured an organizational unit of measurement or group, you might be able to Inherit or Override a parent organizational unit, or Unset a group.

It can take up to 24 hours for changes to appear.

Control who can access files stored on shared drives

Supported editions for this feature: Business organisation Standard and Business Plus; Enterprise; Educational activity Fundamentals, Education Standard, Teaching and Learning Upgrade, and Pedagogy Plus; G Suite Business concern; Essentials. Compare your edition

You can control who can move files and folders outside of your organization when moving content from:

  • A shared drive in your organization to a shared drive owned by another arrangement or someone's My Drive in another organization
  • Someone's My Drive in your organization to a shared bulldoze owned by another organisation

For details on controlling who can admission files stored on shared drives, go to Control sharing for your system.

Related topics

  • How Drive protects your privacy & keeps you in control
  • Allow users to create shared drives
  • Set target audiences for a Google service
  • Add an organizational unit
  • Motion users to an organizational unit

Was this helpful?

How can we ameliorate it?