Skip to main content

How to See Who Has Access to Every File in Your Google Drive

Google Drive's UI answers "who has access?" one file at a time. If you want the same answer for all your files at once — across My Drive, Shared Drives, and files shared with you — you need to export every permission to a spreadsheet.

This guide shows how to do that for free, in about 5 minutes of setup, using the DriveAuditr Google Sheets template.

What you'll get

A single Google Sheet with one row per (file, person) pair. So if a file is shared with three people, you get three rows for that file. Each row tells you:

  • The file's name, owner, type, and direct URL
  • The person's email, domain, and display name
  • Their role — owner, editor (writer), commenter, or viewer (reader)
  • The permission type — direct user share, group share, domain share, or "anyone with the link"

That's the structure you need to answer questions like:

  • "Which of my files are shared with personal Gmail addresses?" → filter where domain = gmail.com.
  • "Who outside my company has edit access?" → filter role = writer AND domain ≠ your company domain.
  • "Is anything shared with my old contractor's email?" → filter email = that address.
  • "Which files are still 'Anyone with the link'?" → filter permission type = anyone.

Step 1: Copy the free template

Get the DriveAuditr template (free, emailed instantly) and click "Make a copy" to put it in your own Drive. Everything runs locally in your Google account — no server, no data export, no third-party storage.

Step 2: Run the audit

In your copy of the sheet:

Drive Audit → Run Audit Now

The first run requests read-only Drive permission so the script can enumerate your files. The script is open source on GitHub — you can read every line before authorizing.

Step 3: See the access list

When the audit completes, the "Drive Audit" tab contains the full access list. The most useful columns are:

ColumnWhy it matters
File nameIdentifies the document
OwnerWho can grant or revoke access
EmailWho has access
DomainQuick way to spot external users
RoleWhat level of access (reader/commenter/writer/owner)
Permission typeuser, group, domain, or anyone
Direct URLOne-click open in Drive

Step 4: Slice the data

A few useful filters once the data is loaded:

Everyone outside your company:

Filter: Domain is not equal to yourcompany.com

Files anyone on the internet can access:

Filter: Permission type = anyone

Files where a specific ex-employee still has access:

Filter: Email = exemployee@yourcompany.com

Files shared with personal email addresses:

Filter: Domain matches one of: gmail.com, yahoo.com, outlook.com, hotmail.com

You can also sort by File modified to see whether the access lives on stale or actively-used files — old files with broad access are usually the easiest cleanup wins.

Why a spreadsheet beats Google Drive's UI

Drive shows you permissions one document at a time. A spreadsheet:

  • Gives you one searchable view across every file.
  • Lets you filter by domain, role, permission type, or modification date in seconds.
  • Makes a great input for a spreadsheet macro that revokes access in bulk (advanced).
  • Is reproducible — re-run the audit monthly and diff the results to spot newly-introduced shares.

Step 5: Keep it fresh

Permissions change every time someone clicks "Share." Use:

Drive Audit → Setup Weekly Schedule

…to re-run the audit weekly. Combine with conditional formatting (highlight any row where Domain ≠ your domain) and you get a living "who has access" dashboard with effectively zero ongoing effort.

Frequently asked

Does the script see files in Shared Drives? Yes — any Shared Drive you're a member of is included.

Can it see files I don't have access to? No. The audit only lists files visible to the Google account running it. To audit an entire Workspace tenant, run it from a super-admin account.

Does this share my data with anyone? No. The script runs entirely inside your Google account using Apps Script. There is no external server.

Next steps

Questions? Email driveauditr@terrydjony.com.