Overview
For customers using Google Workspace, this article describes an issue where File DLP cannot control External share for files in My Drive owned by external Shared users, along with the corresponding workaround.
Issue
File DLP cannot be used to control External share for files in My Drive owned by external Shared users.
This issue occurs only when external Shared users Create a file in My Drive and are the Owner.
It does not occur when a file is created in a Shared Drive.
Example
Shared users A in your environment invites external Shared users B to a Folder （Folder A） created in My Drive.
If Shared users B Creates a file （file B） in Folder A, Shared users B becomes the Owner of file B.
In the situation described above, even if File DLP is used to Delete Shared users B's access rights to Folder A, Shared users B retains ownership of and access rights to file B in Folder A.
Therefore, if Shared users B knows the Shared link for file B, they can continue to access file B.
Workaround
To control External share for files created by external Shared users, you can use one of the following methods.
- When sharing a Folder, share it on a Shared Drive instead of My Drive.
- When an external Shared users Creates a file, transfer the Owner 権限 to a メンバー in Internal Domains.
Translation Disclaimer
This article has been automatically translated from the original Japanese version for your convenience.
While we strive to ensure accuracy, we cannot guarantee its reliability or completeness.
In the event of any discrepancies or questions regarding the content, the official Japanese version shall prevail.