Educause Security Discussion mailing list archives

Re: [External] [SECURITY] Google Workspace for Education domain shared files


From: Brian Amstutz <brian.amstutz () ASBURYSEMINARY EDU>
Date: Fri, 3 Sep 2021 14:16:38 -0400

Thanks for responding Kevin

Under Sharing Settings -> Sharing Options, I see where you can restrict
from sharing outside your domain, but I don't see anything that restricts
from sharing to (everyone in) the domain... what am I missing?

Brian


On Fri, Sep 3, 2021 at 11:27 AM Kevin Wilcox <wilcoxkm () appstate edu> wrote:

On Fri, 3 Sept 2021 at 11:04, Brian Amstutz
<brian.amstutz () asburyseminary edu> wrote:

Do you know if there is a setting that prevents a user from sharing a
Google Workspace file with the entire domain or with anyone on the internet?

Yes, you can restrict sharing by OU membership to just your domain
(both in and out)

Have you found a way to identify all of the domain shared (source:domain
search) files AND un-share them from the domain?

You can use the Drive API's setSharing() function to restrict access.
It's not exactly trivial but it's doable. Warning: for a large domain
(more than, say, 10k users, you're going to want to parallelise
it...when I used to script against 100k+ accounts, I discovered very
quickly that python threads actually aren't; the last few scripts I
worked on would saturate a 48-core, 128GB RAM system but could keyword
search + change labels for messages in 125k+ mailboxes in 15 - 20
minutes).

kmw

**********
Replies to EDUCAUSE Community Group emails are sent to the entire
community list. If you want to reply only to the person who sent the
message, copy and paste their email address and forward the email reply.
Additional participation and subscription information can be found at
https://www.educause.edu/community


**********
Replies to EDUCAUSE Community Group emails are sent to the entire community list. If you want to reply only to the 
person who sent the message, copy and paste their email address and forward the email reply. Additional participation 
and subscription information can be found at https://www.educause.edu/community

Current thread: