Audit users ability to create new shared drives

MoyenneNiveau 1Revue manuellegoogle-workspace

Description

Organizations should determine if all users should have the ability to create new shared drives. Organizations should allow users to create shared drives only if it is allowed under your organization's DLP restrictions and meets your organization's requirements. By default, when a user account is deleted all the data in their personal drive is deleted as well. In this case, administrators should transfer ownership of a user's files to another user. Note: See additional information on transferring files.

Méthode de vérification

Méthode d'audit: Revue manuelle

Cette recommandation ne peut pas être vérifiée automatiquement. Une analyse la liste avec ces instructions lorsque vous passez --include-manual.

To verify this setting via the Google Admin Console: 1. Log in to https://admin.google.com as an administrator 2. Select Apps 3. Select Google Workspace 4. Select Drive and Docs 5. Under Sharing settings, select Shared drive creation 6. Ensure Prevent users in <Company> from creating new shared drives is un-checked

Méthode de correction

Méthode de correction: Recommandation ou correctif d'infrastructure

To verify this setting via the Google Admin Console: 1. Log in to https://admin.google.com as an administrator 2. Select Apps 3. Select Google Workspace 4. Select Drive and Docs 5. Under Sharing settings, select Shared drive creation 6. Set Prevent users in <Company> from creating new shared drives to unchecked 7. Select Save

Propriétés

Systèmes d'exploitation: Tous
Étiquettes: google-workspaceloggingsaas
Référence: CIS Google Workspace Foundations Benchmark v1.4.0 - 3.1.2.1.2.1 Audit users ability to create new shared drives