Enhanced external sharing insights now available in Drive Inventory

Enhanced external sharing insights now available in Drive Inventory Reporting

Administrators using Drive Inventory Reporting in Google BigQuery can now access granular external sharing fields designed to simplify complex permission structures. By automatically consolidating direct permissions, group memberships, and public links into clear signals, this update helps organizations easily identify external exposure across their Drive environments.

Administrators can now distinguish between human users, service accounts, and files published to the web, as well as cross-reference sharing attributes with existing Data Loss Prevention (DLP) metadata to prioritize remediation for high-risk data.

Getting started

Admins: This feature will be OFF by default and can be enabled via the “External sharing calculations” setting under Drive inventory report settings in the Google Admin console. Note that for organizations with large Google groups, enabling this calculation may extend processing time and impact report delivery schedules.

Rollout pace

Rapid Release and Scheduled Release domains: Gradual rollout (up to 15 days for feature visibility) starting on August 14, 2026

Availability

Enterprise: Enterprise Standard, and Plus
Education: Education Standard, and Plus
Other Editions: Frontline Plus; Enterprise Essentials Plus; Cloud Identity Premium

Resources

Google Workspace Admin Help: Export your organization’s Drive inventory
Google Workspace Admin Help: Schema and example queries for Drive inventory exports in BigQuery

Google Workspace administrators can now access granular external sharing fields within Drive Inventory Reporting in Google BigQuery. Announced by Google in August 2026, this update automatically consolidates complex permission structures—such as direct permissions, group memberships, and public links—into clear signals to pinpoint external data exposure. [1]

Key Capabilities of the Update

Consolidated Signals: Merges direct access, group permissions, and public links automatically.
Identity Distinction: Differentiates between human users, service accounts, and web-published files.
DLP Cross-Referencing: Maps sharing attributes against Data Loss Prevention (DLP) metadata to isolate high-risk targets.
Scale Visibility: Overcomes traditional API limitations to map exposure across the entire domain corpus. [1, 2, 3]

Supported Google Workspace Editions

The enhanced external-sharing insights fields are available for the following premium tiers: [4]

Enterprise Standard / Enterprise Plus
Education Standard / Education Plus
Frontline Plus
Enterprise Essentials Plus
Cloud Identity Premium [4]

Strategic Implementation and Considerations

Off by Default: Administrators must manually enable the new external-sharing calculation field. [4]
Processing Latency: Large nested groups inside the domain can increase BigQuery processing times. [4]
Cost Control: Organizations should audit their current Google Cloud project billing model, as high file volumes increase BigQuery querying costs. [4]
Manual Fallbacks: If an organization uses an unsupported edition, admins should instead rely on the standard Google Workspace Admin Console Drive apps reports, file exposure dashboards, or localized shared drive audits. [4, 5]