Secure collaboration allows admins to monitor sharing activity on sensitive content, and apply DLP policies to modify sharing permissions. You can detect and remove public links on files, and scan existing data to detect folders and files shared with external users, and apply DLP policies. These policies are applied when collaborators are invited to any folder or file.
There are two types of Collaboration policies that are part of Google Drive Secure Collaboration:
- File/Folder Policies
- Shared Link Policies
Different Response actions are supported for each policy type.
NOTE: Files inside shared folders inherit the same sharing permissions as the folder. These permissions cannot be overridden at the file level.
File/Folder Collaboration Policies
There are two ways to handle responses for Folder/File policies: Modify permissions or quarantine/delete. For details, see File/Folder Collaboration Policies.
Shared Link Collaboration Policies
When a shared link is generated on a file with sensitive content, or when a file with existing shared link is edited by adding sensitive content, Shared Link policies allow you to remove a shared link, stopping the file from being shared.
You can set the visibility of shared resources for the external user in the following ways:
- Any. Any of the below options.
- Share Public on Web. Anyone on the web can find and access. No Sign-in required. For example, Only G Suite applications such as Gmail, G Drive.
- Share Public on Web with Link. Anyone who has the link can access it. No Sign-in required. For example, SaaS applications such as Office 365, Box, Dropbox, G Suite.
- Share within Company on Web. Anyone at a specified company can find and access. Sign-in required. For example, Only G Suite applications such as Gmail, G Drive
- Share within Company on Web with Link. Anyone at a specified company who has the link can access it. Sign-in required. For example, SaaS applications such as Office 365, Box, Dropbox, G Suite.
To create a Shared Link policy:
- Go to Policy > DLP Policies.
- Click Actions > Create New Policy.
- Under Rules, select Collaboration.
- Choose Shared Link.
- Add any option keywords or data identifiers.
- Choose Remove Shared Link from the Response menu.