Best Practices for Sharing in Google Drive

Overview

When you share from Google Drive, you can control whether people can edit, comment on, or view your file. The U-M Google team recommends using caution when you choose permissions for your files and folders in U-M Google Drive to ensure the privacy and security of university data. This is especially true when collaborating with people outside of U-M. It is your responsibility to appropriately share data with only those who should have access to it.

​Important: Only individuals who own U-M content should be in full control of who can access it.

Sharing files in Google Drive

There are two methods to share content within Google Drive:

  • Share with people and groups: Granting access to specific individuals you want to collaborate with on the file.
  • Get link: Granting access to anyone who has the link to the file.

We recommend only sharing your files with those who need it. If the list of users grows too large, we recommend using an MCommunity group to help manage permissions. To learn more about using MCommunity with Google, see Google: Working with MCommunity Groups.

Share with people and groups

When you share a file with an individual or group, you can choose what they can do with it:

  • Viewer: People can view but can’t change or share the file with others.
  • Commenter: People can make comments and suggestions but can’t change or share the file with others.
  • Editor: People can make changes, accept or reject suggestions, and share the file with others.

Screenshot of the new sharing dialog in Google Drive

Tip: Within shared drives, you can review who you’ve shared a file with outside your shared drive membership. Once shared, you can view these individuals under the Guests tab.

Warning: When granting Editor access to files in My Drive, you automatically allow individuals the opportunity to change the sharing settings of your document and share it with anyone they desire. This includes changing the access levels of individuals or removing them from it altogether. Use caution when deciding who to give Editor access to your file. However, when granting Editor access to files in a shared drive, you have the option to turn off the abilities of Editors to change permissions and sharing. Click the gear icon (share with people settings) in the sharing dialog box and uncheck “Editors can change permissions and share.”

Get link (i.e., shareable links)

Shareable links can be used to share files to a broader audience or specific people. These links are accessible and customizable under Get link in the sharing dialog box. When you click Copy link, a shared link is copied. Link sharing is useful for sharing non-sensitive files that require quick attention or with large numbers of colleagues who need access to a file. If link sharing is used, by default, this link is set to Restricted, so only people you’ve shared the file with can access the link.

Important: We recommend using link sharing with access set to the "University of Michigan" only as needed. If link sharing is used, make sure appropriate permissions to the file are in place, particularly with external collaborators.

When you share a link to a file in My Drive or a shared drive, you control how widely the file is shared:

  • Restricted: Only specific people you share the file with will be able to use it.

Note: This is the default setting in U-M Google Drive.

  • University of Michigan: Anyone at the University of Michigan with the link can access it. Link access can be set to Viewer, Commenter, or Editor permissions.
  • Anyone with the link: Anyone on the internet who has the link can use your file without signing in to their Google Account. Link access can be set to Viewer, Commenter, or Editor permissions.

Tip: Expiration dates can be set for individuals with whom you share your files. To learn more about expiration dates, visit the G Suite Learning Center. 

Sharing Externally With Collaborators Without Google Accounts

It is recommended that external collaborators either use or create a Google account, as it is the most secure way to collaborate with them.

If you want to share with someone who does not use a Google account and is unable or unwilling to create one, there are two options:

  • Visitor sharing: Invite them as a collaborator to the file with PIN-based sharing.
  • Link sharing: Set link sharing to “Anyone with the link” and share the link with them.

​Screenshot of the new dialog for sharing with an external user in Google Drive.

When you are sharing with a non-Google account, we strongly recommend using visitor sharing. With visitor sharing, you can share items with non-Google accounts, enabling them to view, comment on, or edit content in Google Drive (My Drive and shared drives) and Sites using a secure PIN code. You, as a file owner, can view detailed activity on your files and revoke access from the Drive sharing dialog at any time.

GIF: In browser, basic, unidentifiable email client design shows someone received an email with a PIN code. They then take that code and enter it into a Google verification page to access the Google Doc. 

Note: Visitors can edit, comment on, or view your files for seven days after they verify their email address. After seven days, they will need to reverify using the original shared link in their email invite, so remind them to save the email!

If a visitor would like to upgrade from a visitor session to a Google account with the same email address, they will need to first delete their visitor session and then create a Google account. Visitors can see Google’s Delete your visitor session for more information.

Tags: 
Google
Google Drive
Last Updated: 
Monday, October 19, 2020