How to Configure Google Drive Shared Drive Access Policies and Target Audiences

In growing Google Workspace environments, relying on individual user “My Drive” folders leads to data loss when employees depart an organization, taking document ownership with them. Shared Drives solve file ownership by belonging to the organizational domain rather than individual accounts. However, without strict access governance, team members can accidentally share confidential financial records or intellectual property with unauthorized external vendors. Configuring Shared Drive Access Policies and Target Audiences establishes granular sharing boundaries across enterprise departments.

Understanding Shared Drive Roles and Permission Inheritance

Shared Drives utilize hierarchical permission levels assigned to users or Google Groups:

• Manager: Full administrative rights to manage members, alter drive security settings, and delete files or folders.
• Content Manager (Default): Can create, edit, move, and delete files inside the shared space, but cannot modify drive settings or add members.
• Contributor: Can add and edit files, but cannot delete files permanently.
• Commenter: Read-only access with the ability to add feedback and suggestions.
• Viewer: Strictly read-only access.

Configuring Shared Drive Security Boundaries

Drive Managers can enforce strict restrictions directly within the Google Drive interface:

1. Open Google Drive in your web browser.
2. In the left navigation menu, expand Shared drives and select your target shared space.
3. Click the Settings icon (gear) in the top-right corner or click the drive name and select Shared drive settings.
4. Configure the three critical protection toggles:
   • Sharing outside [Organization]: Toggle off to completely prevent members from sharing files with external email addresses outside your Google Workspace domain.
   • Sharing with non-members: Toggle off to prevent members from sharing individual documents with colleagues who are not members of the Shared Drive.
   • Download, copy, and print restrictions: Check the box to prevent Commenters and Viewers from downloading, copying, or printing sensitive files.
5. Click Apply to enforce protections across all existing and future documents in the drive.

Configuring Target Audiences in Google Workspace Admin Console

By default, when users generate a shareable link, Google Drive offers generic choices like “Anyone with the link” or “Anyone in your organization”. In large enterprises, sharing a confidential HR folder with “Anyone in the organization” is dangerously broad. Target Audiences replace broad sharing options with curated internal groups (such as Engineering Department or Executive Leadership):

1. Sign into the Google Workspace Admin Console (admin.google.com).
2. Navigate to Directory > Target audiences.
3. Click Create target audience.
4. Enter a descriptive name (e.g., Finance & Accounting Team) and description.
5. Under Members, add specific Google Groups or Organizational Units that belong to this audience.
6. Save and activate the audience.

Applying Target Audiences to Drive Sharing Policies

To surface your custom audience in the user link sharing dialog:

1. In the Admin Console, go to Apps > Google Workspace > Drive and Docs.
2. Select Sharing settings > Target audiences.
3. Select your target Organizational Unit.
4. Add your new Target Audience to the list of available choices.
5. Now, when employees inside that department click the Share button on any file, the link sharing menu explicitly prompts them to share with “Finance & Accounting Team” rather than the entire global company.