Google Drive Security Guide

1. Visit Google Drive (drive.google.com).
2. Log in with your Pitt credentials. Google may automatically log you in under a personal account. If you log in via Pitt credentials, you will be redirected to Pitt passport authentication before accessing your Google Drive. Click the icon in the top right-hand side to verify what account is logged in.
   

1. To access all configuration settings for sharing a My Drive folder, select that folder, then click the ellipsis icon("...") on the right-hand side of the folder and select Share.
   Note: If no folder or file is selected, this option will not appear.  
    
2. A Share window for managing all security configurations opens. Click the top right-hand side gear icon.  
    
3. A new window will open with settings related to editor permissions and sharing . Keeping in mind that the most secure configuration is to enable none of these options, you can select a setting.
   Note: The image below shows the Editor option that allows these users to change permissions and share documents. This setting should not be enabled for sensitive data.  
   
    
4. Enter a user's email address in the "Add people, groups, and calendar events" field, then select the auto-filled address. 
    
5. Click the drop-down menu to the right of the email address, then select Viewer, Commenter, or Editor permissions for the user.   
   
   Note: It is the responsibility of the folder owner to make sure these permissions are assigned correctly. 

   Google Drive offers several permission roles that determine what users can do with files and folders shared with them. These roles help manage and control how content is shared and collaborated on within Google Drive, ensuring that users have the necessary access for their specific tasks or responsibilities. Here’s a quick rundown of the main roles:

• Viewer: A viewer can only read the file or view the folder. They can't make any changes or add any content.

• Commenter: In addition to viewing, commenters can also add comments or suggestions to the file. This is especially useful for collaborative reviews of documents without allowing changes to the original content.

• Editor: Editors have more comprehensive permissions. They can view, comment on, and make changes to files or folders. They can also add or remove other users, unless restricted by the owner.

• Owner: The owner has full control over the file or folder, including setting sharing permissions, editing, and deleting the file. In the case of folders, they can also move items out of the folder or delete them.

Note: You can add non-Pitt users to a My Drive folder. You will see a warning notification about a non-Pitt user. Click Share anyway to proceed. It is the responsibility of the folder owner to manage non-Pitt users. 

• To manage link settings for file locations shared with users, return to the Share window, click the downward pointing arrow under General access, select the change, then click Done.
  Note: The image below shows the three permission settings for links. The Restricted setting is the most secure and required setting for sensitive data; only people added to the folder can open a link. 
   
• To remove user access to folder(s) or change permission levels, return to the Share window. Locate the user that needs their permission level changed, click on the right-hand side drop-down menu, and select a permission, and click Save.
  Note: The Editor access window, shown below, allows the user to share files with others and should only be granted if absolutely necessary. It is the responsibility of the folder owner to manage access permission levels properly. 
  
   

Shared Drives are appropriate to use when working on a project with a group of people who all need access to the same files, or the content you want to store isn’t personal and interests a specific team or group. Under the Shared Drive window, you can see all shared drives you own or are a member of.

Unlike the Share window feature, Manage members has no create link option in Shared Drives and the gear icon for permission settings (Shared drive settings) is locked so only Pitt administrators can make changes to the Shared Drive.

Only users with Pitt email accounts can be added to a Shared Drive. There is an exemption process to have this changed at the administrative level. To request an exemption, please contact the Technology Help Desk at 412-624-HELP (4357).

Unlike My Drive, where different users might see different files in a folder depending on the access granted, all Shared Drive members can see all files.

Manage Access

1. Select a Shared drive, then click the 3-dot icon to the right of the drive, and select Manage members. 
    
2. Enter a user's Pitt email address.
   
3. To add or change a permission level for the user, make a selection from the the Content manager drop-down menu and click Save.
   Note: The options are viewer, commenter, contributor, content manager, and manager. The Manager permission can grant access to specific folders in shared drives. The Commenter, Contributor, and content manager permissions can only request the Manager to add people to specific files in shared drives. It is the responsibility of the manager of the shared drive to assign the correct permission level for the users.
   

For more guidance regarding Shared Drive permission levels, please see https://support.google.com/a/answer/7337554?hl=en.

Remove Access

1. Open the Manage members window, then navigate to the user.
2. Click the permission drop-down menu to the right of their name.
3. Select Remove and click Save.