How to Configure Shared Drives Access Permissions and Domain Sharing in Google Drive

In enterprise organizations, relying on individual employee “My Drive” folders to store departmental documents presents severe business continuity hazards. When an employee departs the company, files owned by their personal account risk accidental deletion during account deprovisioning. Google Workspace solves institutional data persistence through Shared Drives. In Shared Drives, files belong to the organization as an entity rather than an individual account. Team administrators can enforce granular permission roles, prevent unauthorized external sharing, and audit access logs centrally.

Understanding Shared Drive Permission Roles

Shared Drives utilize a role-based access model across five distinct tiers:

• Manager: Full administrative rights. Can add/remove members, modify drive sharing restrictions, restore deleted files, and permanently delete assets.
• Content Manager: Standard default role for team members. Can upload, edit, move, and trash files, but cannot alter membership or drive policies.
• Contributor: Can add and edit files, but cannot move or delete items.
• Commenter: Read-only access with the ability to insert suggestions and comments.
• Viewer: Strictly read-only access. Cannot comment, edit, or modify files.

Creating and Provisioning a New Shared Drive

To create a centralized team repository:

1. Open drive.google.com in your browser while signed into your Google Workspace account.
2. In the left navigation sidebar, click Shared drives.
3. Click the + New button in the upper-left corner.
4. Enter a descriptive name (e.g., “Engineering Specifications” or “Marketing Brand Assets”) and click Create.
5. Click Manage members in the top-right corner to assign colleagues or Google Groups to their designated access roles.

Restricting External Sharing and Download Permissions

To prevent confidential company data from leaking outside your corporate domain:

1. Open the Shared Drive you wish to configure.
2. In the upper-right corner next to the drive name, click the Shared drive settings gear icon.
3. Configure critical security toggles:
   • Sharing with non-members: Check or uncheck “Allow people outside this organization to access files”. Disabling this toggle locks assets strictly within corporate domain accounts.
   • Sharing with non-drive members: Restrict whether internal colleagues outside this specific Shared Drive can be granted access to individual files.
   • Download, copy, and print restrictions: Check “Prevent commenters and viewers from downloading, copying, and printing” to safeguard proprietary designs.
4. Click Apply to lock in security policies.

Auditing File Activity and Restoring Deleted Content

To monitor collaborative changes and recover trashed items:

• Click the Activity tab in the right-hand details pane to view an immutable chronological audit trail of all file creation, editing, moving, and deletion events.
• Files moved to the Shared Drive Trash remain available for 30 days. Drive Managers can right-click any item in Trash and select Restore to return the file to its original location with permissions intact.