How to manage, protect, and monitor Google Team Drive data

A G Suite administrator can modify Team Drive membership, sharing, and content action settings to create Team Drives that range from highly restricted to relatively open.

Video: Google's vision for machine learning in its G Suite

Google gives people who use G Suite Business, Enterprise, Education, or Nonprofit editions two distinct types of Google Drive storage: My Drive and Team Drives. Both serve as a reliable place to store, organize, and share files. Yet, there's one major difference between the two: When you add a file to a Team Drive, all members of the Team Drive gain access to the file, but when you add a file to My Drive, your file remains private by default.

Google also gives G Suite administrators the ability to adjust the default file access and sharing settings for Google Drive and Team Drives. Most G Suite administrators review and configure Google Drive settings during the initial G Suite deployment, but Google recently added more settings in mid-2018 to help secure Team Drive data.

Review the following settings to manage, protect, and monitor your organization's Team Drives. You'll need a G Suite administrator account for your organization to access Admin console settings.

Screenshot of 5 Team Drive control options (prevent... creation of new, modifying settings, outside access, non-member access, or download, copy, or print from Team Drives)

Review and adjust Team Drive creation controls to prevent unwanted sharing, access, or actions.

1. Manage Team Drives

In many cases, your organization's default Google Drive sharing settings also serve as the default Team Drive sharing settings. Sign in to the G Suite admin console (at, then navigate to Apps > G Suite > Drive and Docs > Sharing Settings. Review these setting to ensure that external sharing is either allowed or restricted appropriately.

Immediately below the Sharing settings section, you'll see Team Drive creation controls. Each of these five options prevents a different action. Any selection made here applies to ALL of the organization's Team Drives. For example, a G Suite administrator at an organization especially concerned with security could select all five of these options, which would result in Team Drive access being restricted solely to people within an organization, and with only members of a Team Drive being able to access files on that Team Drive. Such a configuration would also constrain downloading, copying, and printing of files from the Team Drive.

SEE: Comparison chart: Enterprise collaboration tools (Tech Pro Research)

A more frequently-used configuration might be to check only the "Prevent full-access members from modifying Team Drive settings" option. This ensures that a G Suite administrator can select the sharing, membership, and content action options allowed (i.e., access to download, copy, or print) for each Team Drive, without the risk that a full-access member might modify these settings.

Screenshot of G Suite Admin console Manage Team Drives options (with sharing, membership, and content action options shown)

Review and manage Team Drive sharing and content action settings for any of your organization's Team Drives.

2. Protect Team Drive content

A G Suite administrator may also review and adjust membership, sharing, and content action settings for all Team Drives. Again, login to the Admin console (, then navigate to Apps > G Suite > Drive and Docs > Team Drive > Manage Team Drives.

For each Team Drive an administrator may choose to enable or disable:

  • Sharing outside the organization
  • Sharing with non-members
  • The ability of people to download, copy, and print files from the Team Drive

And, for each Team Drive, the administrator may also prevent Team Drive members with full-access from modifying these settings.

Screenshots of Team Drive sharing options -- left shows items not able to be modified; right show items able to be changed.

A G Suite administrator can restrict many Team Drive sharing, membership, and content actions (as shown on the left). More permissive options allow Team Drive members to share externally, add members, or copy, download, and print files (as shown on the right).

Since these settings apply to each Team Drive, you can configure very flexible and open options that allow external sharing and content actions for some Team Drives, while also choosing much more locked-down options that prohibit external sharing and content actions for other Team Drives.

Importantly, as long as a G Suite administrator doesn't prohibit it, members of a Team Drive who have full-access permissions may adjust Team Drive settings.

Screenshot of G Suite Admin console report with "Team Drive" Item Type filter selected, showing Team Drive changes.

Monitor changes to Team Drive settings with G Suite Admin console filters and reports.

3. Monitor Team Drive changes

G Suite also gives administrators the ability to review Team Drive changes. Sign in to the Admin console, then go to Reports > Audit > Drive > then look for the Item Type filter (in the column on the left) and choose "Team Drive" from the options. Go to the bottom of this column, then select "Search" to apply the filter. You'll then see a report of all Team Drive administrative activity for your organization.

You can add additional filters to this report, too. For example, in addition to selecting "Team Drive" items, you might also look for the "Item Visibility Change" option, and choose "Internal to External," then select Search. This displays a report of Team Drive items now available to people outside the organization, which were previously only available internally.

Your thoughts on Team Drive?

If you use Team Drives for files at your organization, what settings do you use most often? If you're a G Suite administrator, have you restricted any Team Drive settings -- or do you allow most actions? Let me know in the comments below, or on Twitter (@awolber).

Also see

Illustration of Team Drive (icon) on left, with three icons on the right (arranged vertically): business sharing icon, people sharing icon, and printing icon, with lines drawn from the Team Drive to each icon
Image: Andy Wolber / TechRepublic